CVE-2002-1403
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via...
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
Exploit likelihood
What each source reports
NVD Score used
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
- Record
CVE-2002-1403- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
- Record
CVE-2002-1403- Updated
- 2026-11-02
EUVDEUVD-2002-1386 No score
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
- Record
EUVD-2002-1386- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cjv5-r44f-hxgj No score
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via...
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
- Record
GHSA-cjv5-r44f-hxgj- Updated
- 2026-11-02
OSV No score
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
- Record
CVE-2002-1403- Updated
- 2026-11-02
OSVDEBIAN-CVE-2002-1403 No score
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
- Record
DEBIAN-CVE-2002-1403- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-1403 is a high vulnerability (CVSS 7.2) in Phystech Dhcpcd, published January 17, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in dhcpcd 1:1.3.22pl2-2.
References
mandrakesoft.com/security/advisories?name=MDKSA-2003:003
debian.org/security/2002/dsa-219
securityfocus.com/bid/6200
marc.info?l=bugtraq&m=104189546709447&w=2
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000549
exchange.xforce.ibmcloud.com/vulnerabilities/10663
nvd.nist.gov/vuln/detail/CVE-2002-1403
github.com/advisories/GHSA-cjv5-r44f-hxgj
security-tracker.debian.org/tracker/CVE-2002-1403