Vulnerability in Ecartis

CVE-2002-0469

Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, "lock-to-user" is not set, and ecartis is called by certain MTA's, which could allow local users to gain privileges.

EPSS: 0.005 (37.5th percentile) — read the EPSS interpretation.

Affected products

Ecartis — versions 1.0.0_snapshot_2002-01-21, 1.0.0_snapshot_2002-01-25
Listar — versions 0.126a, 0.127a, 0.129a
N/a — versions n/a

References

cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_VULNWATCH)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)