VULNERABILITY INTELLIGENCE
CVE-2002-0851
CVSS score7.2 HIGH
EPSS probability1.05%
CISA KEVNot currently listed
Published2002-09-05
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows local users to gain root privileges via format strings in the device name command line argument, which is not properly handled in a call to syslog.
Primary references
- cve@mitre.org — Exploit, Vendor Advisory
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Exploit, Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Vendor Advisory