Lucene search

[email protected]NVD:CVE-2002-2017

HistoryDec 31, 2002 - 5:00 a.m.

CVE-2002-2017

2002-12-3105:00:00

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

59.5%

JSON

sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, which is then executed by sastcpd.

Affected configurations

Nvd

Node

sasbaseMatch8.0

sasintegration_technologiesMatch8.0

VendorProductVersionCPE
sasbase8.0cpe:2.3:a:sas:base:8.0:*:*:*:*:*:*:*
sasintegration_technologies8.0cpe:2.3:a:sas:integration_technologies:8.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sas	base	8.0	cpe:2.3:a:sas:base:8.0:::::::*
sas	integration_technologies	8.0	cpe:2.3:a:sas:integration_technologies:8.0:::::::*

References

online.securityfocus.com/archive/1/253183

www.iss.net/security_center/static/8024.php

www.securityfocus.com/bid/3994

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

59.5%

JSON

Related for NVD:CVE-2002-2017

cve1 cvelist1