CVE-2002-0265 Privilege escalation in n/a

What is CVE-2002-0265?

CVE-2002-0265 is a medium-severity vulnerability in n/a, published on 25 Jun 2002. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privileges by modifying the file.

Which versions are affected by CVE-2002-0265?

It affects 1 product.

Products include Sawmill Sawmill.

How do I fix CVE-2002-0265?

No fix has been published for CVE-2002-0265 yet. Limit exposure of the affected software until one is available.

Is CVE-2002-0265 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2002-0265 exists.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in n/a

• CVE-2017-5496 Information disclosure in n/a Critical 9.8
• CVE-2013-4947 Other in n/a High 7.5
• CVE-2005-1900 Auth bypass in n/a High 7.5
• CVE-2000-0589 Weak cryptography in n/a High 7.5
• CVE-2000-0588 SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whos Medium 5.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-fw77-wwq7-q5qf.