CVE-2002-1472: High severity Xfree86 Project X11r6 vulnerability
Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows local users to gain root privileges via a modified LDPRELOAD environment variable that points to a malicious module.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1472?
CVE-2002-1472 is considered a high severity vulnerability due to its potential to allow local users to gain root privileges.
How do I fix CVE-2002-1472?
To fix CVE-2002-1472, update to a patched version of the XFree86 X Server, specifically versions later than 4.2.0.
Who is affected by CVE-2002-1472?
Users running XFree86 versions 4.1.0 or 4.2.0 with setuid or setgid programs are affected by CVE-2002-1472.
What type of vulnerability is CVE-2002-1472?
CVE-2002-1472 is an untrusted search path vulnerability that exploits the LD_PRELOAD environment variable.
Can CVE-2002-1472 be exploited remotely?
CVE-2002-1472 cannot be exploited remotely as it requires local access to the system.