CVE-2002-0767 Privilege escalation in n/a
Local attackers can exploit a file descriptor leak in simpleinit to execute arbitrary programs with root privileges.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-0767?
CVE-2002-0767 is a high-severity vulnerability in n/a, published on 26 Jul 2002. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with root privileges.
Which versions are affected by CVE-2002-0767?
It affects 1 product.
Products include Richard Gooch Simpleinit.
How do I fix CVE-2002-0767?
No fix has been published for CVE-2002-0767 yet. Limit exposure of the affected software until one is available.
Is CVE-2002-0767 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2002-0767 exists.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as GHSA-pf83-wcw2-74mp.