CVE-2002-0851

Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows local users to gain root privileges via format strings in the device name command line argument, which is not properly handled in a call to syslog.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.05% chance of exploitation in the next 30 days, 62th percentile

Published

2003-04-02

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0068.html

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/21701
• https://www.exploit-db.com/exploits/21700

References

• CVE Record
• NVD entry

Related

• CVE-2002-0840
• CVE-2002-0855
• CVE-2002-0838
• CVE-2002-0859
• CVE-2002-0833
• CVE-2002-0862