Vulnerability in Chetcpasswd

CVE-2002-2221

Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to gain privileges via a modified PATH that references a malicious cp binary. NOTE: this issue might overlap CVE-2006-6639.

EPSS: 0.003 (20.4th percentile) — read the EPSS interpretation.

Affected products

  • Chetcpasswd — versions 2.3.1, 2.3.3, 2.4.1
  • N/a — versions n/a

References

  • cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
  • cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
  • cve@mitre.org (vdb-entry, x_refsource_SECTRACK, Vendor Advisory)