Every CVE Search/ Get API key

CVE-2002-0767

simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a...

7.2 HighPublic exploit

CVE-2002-0767 is a high vulnerability (CVSS 7.2) in Richard Gooch Simpleinit, published July 26, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.44%, the 73rd percentile. No source names a fixed version.

simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with root privileges.

Exploit likelihood

1.44%Down 0.5 points since Sep 1, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with root privileges.

Record
CVE-2002-0767
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with root privileges.

Record
CVE-2002-0767
Updated
2026-11-02
EUVDEUVD-2002-0759 No score

simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with root privileges.

Record
EUVD-2002-0759
Updated
2026-11-03
GitHub AdvisoriesGHSA-pf83-wcw2-74mp No score

simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a...

simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with root privileges.

Record
GHSA-pf83-wcw2-74mp
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBRichard Gooch SimpleInit 2.0.2 - Open File Descriptor2002-06-12

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, Exploit-DB, GitHub Advisories, NVD

References

MoveEnter Open