Lucene search

MitreCVE-2002-2017

HistoryJul 14, 2005 - 4:00 a.m.

CVE-2002-2017

2005-07-1404:00:00

mitre

web.nvd.nist.gov

sas

base

sastcpd

vulnerability

code execution

cve-2002-2017

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.002

Percentile

59.5%

JSON

sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, which is then executed by sastcpd.

Affected configurations

Nvd

Node

sasbaseMatch8.0

sasintegration_technologiesMatch8.0

VendorProductVersionCPE
sasbase8.0cpe:2.3:a:sas:base:8.0:*:*:*:*:*:*:*
sasintegration_technologies8.0cpe:2.3:a:sas:integration_technologies:8.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sas	base	8.0	cpe:2.3:a:sas:base:8.0:::::::*
sas	integration_technologies	8.0	cpe:2.3:a:sas:integration_technologies:8.0:::::::*

References

online.securityfocus.com/archive/1/253183

www.iss.net/security_center/static/8024.php

www.securityfocus.com/bid/3994

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.002

Percentile

59.5%

JSON

Related for CVE-2002-2017