Skip to content

CVE-2002-0740

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local...

7.2 HighPublic exploitFix available

CVE-2002-0740 is a high vulnerability (CVSS 7.2) in Slrn Development Team Slrn, published July 26, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. Fixed in slrn 0.9.6.2-9.

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.

Exploit likelihood

1.47%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 7.2

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.

Record: CVE-2002-0740
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.

Record: CVE-2002-0740
Updated: 2026-11-02

EUVDEUVD-2002-0732 No score

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.

Record: EUVD-2002-0732
Updated: 2026-11-03

GitHub AdvisoriesGHSA-f324-877p-jh9x No score

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local...

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.

Record: GHSA-f324-877p-jh9x
Updated: 2026-11-02

OSV No score

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.

Record: CVE-2002-0740
Updated: 2026-11-02

OSVDEBIAN-CVE-2002-0740 No score

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.

Record: DEBIAN-CVE-2002-0740
Updated: 2026-11-02

Affected products

slrn development team slrn

Affected packages

Affected packages
Package	Affected	Fixed
`slrn` Debian:12	before 0.9.6.2-9	0.9.6.2-9
`slrn` Debian:13	before 0.9.6.2-9	0.9.6.2-9
`slrn` Debian:14	before 0.9.6.2-9	0.9.6.2-9

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	SLRNPull 0.9.6 - Spool Directory Command Line Parameter Buffer Overflow	2002-04-22
PoC in GitHub	alt3kx/CVE-2002-0740	2018-05-11

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub

References