CVE-2002-1245
Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program,...
CVE-2002-1245 is a high vulnerability (CVSS 7.2) in Frank Mcingvale Luxman, published November 6, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 40th percentile. Fixed in luxman 0.41-17.1.
Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users to modify /dev/mem and gain privileges via a modified PATH environment variable that points to a Trojan horse gzip program.
Exploit likelihood
What each source reports
NVD Score used
Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users to modify /dev/mem and gain privileges via a modified PATH environment variable that points to a Trojan horse gzip program.
- Record
CVE-2002-1245- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users to modify /dev/mem and gain privileges via a modified PATH environment variable that points to a Trojan horse gzip program.
- Record
CVE-2002-1245- Updated
- 2026-11-02
EUVDEUVD-2002-1229 No score
Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users to modify /dev/mem and gain privileges via a modified PATH environment variable that points to a Trojan horse gzip program.
- Record
EUVD-2002-1229- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5cc9-22f6-38c6 No score
Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program,...
Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users to modify /dev/mem and gain privileges via a modified PATH environment variable that points to a Trojan horse gzip program.
- Record
GHSA-5cc9-22f6-38c6- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
luxmanDebian:3.0 |
before 0.41-17.1 | 0.41-17.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
debian.org/security/2002/dsa-189
marc.info?l=bugtraq&m=103660334009855&w=2
idefense.com/advisory/11.06.02.txt
iss.net/security_center/static/10549.php
archives.neohapsis.com/archives/vulnwatch/2002-q4/0062.html
securityfocus.com/bid/6113
nvd.nist.gov/vuln/detail/CVE-2002-1245
github.com/advisories/GHSA-5cc9-22f6-38c6