VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 12, 2002· Updated Jun 16, 2026

CVE-2002-0469

CVE-2002-0469

Description

Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, "lock-to-user" is not set, and ecartis is called by certain MTA's, which could allow local users to gain privileges.

Affected products

6
  • Ecartis/Ecartis3 versions
    cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-01-21:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-01-21:*:*:*:*:*:*:*
    • cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-01-25:*:*:*:*:*:*:*
    • (no CPE)range: snapshot 20020125 and earlier
  • Listar/Listar3 versions
    cpe:2.3:a:listar:listar:0.126a:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:listar:listar:0.126a:*:*:*:*:*:*:*
    • cpe:2.3:a:listar:listar:0.127a:*:*:*:*:*:*:*
    • cpe:2.3:a:listar:listar:0.129a:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.