CVE-2002-0542
mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is...
CVE-2002-0542 is a high vulnerability (CVSS 7.2) in Openbsd, published July 3, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.53%, the 75th percentile. No source names a fixed version.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 1.53%EPSS, 75th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cron.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | OpenBSD 2.9/3.0 - Default Crontab Root Command Injection | 2002-04-11 |
What each source reports
NVD Score used
mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cron.
- Record
CVE-2002-0542- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cron.
- Record
CVE-2002-0542- Updated
- 2026-11-02
EUVDEUVD-2002-0537No score
mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cron.
- Record
EUVD-2002-0537- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2r4p-jx45-wqw6No score
mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is...
mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cron.
- Record
GHSA-2r4p-jx45-wqw6- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.