CVE-2002-1472

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows local users to gain root privileges via a modified LD_PRELOAD environment variable that points to a malicious module.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/linux/suse/2002-q3/1116.htmlPatch, Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000529
http://www.iss.net/security_center/static/10137.phpPatch, Vendor Advisory
http://www.osvdb.org/11922
http://www.redhat.com/support/errata/RHSA-2003-066.html
http://www.redhat.com/support/errata/RHSA-2003-067.html
http://www.securityfocus.com/bid/5735Patch, Vendor Advisory
http://archives.neohapsis.com/archives/linux/suse/2002-q3/1116.htmlPatch, Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000529
http://www.iss.net/security_center/static/10137.phpPatch, Vendor Advisory
http://www.osvdb.org/11922
http://www.redhat.com/support/errata/RHSA-2003-066.html
http://www.redhat.com/support/errata/RHSA-2003-067.html
http://www.securityfocus.com/bid/5735Patch, Vendor Advisory

Timeline

Published: Mar 3, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-14734.6Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of service and possibly ex CVE-2002-14745.0Unknown vulnerability or vulnerabilities in TCP/IP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to cause a denia CVE-2002-14755.0Unknown vulnerability in the ARP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to "take over packets destined for CVE-2002-14764.6Buffer overflow in setlocale in libc on NetBSD 1.4.x through 1.6, and possibly other operating systems, when called with the LC_ALL category CVE-2002-14777.5graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in CVE-2002-147810.0Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.CVE-2002-14794.6Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local CVE-2002-14806.8Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or script into guestbook page CVE-2002-14817.5savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a denial of service or ex CVE-2002-148210.0SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote attackers to gain a CVE-2002-14835.0db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument i CVE-2002-14849.8DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections t