CVE-2002-1403
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via...
CVE-2002-1403 is a high vulnerability (CVSS 7.2) in Phystech Dhcpcd, published January 17, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in dhcpcd 1:1.3.22pl2-2.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 0.42%EPSS, 36th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1:1.3.22pl2-2dhcpcd +1 more
Description
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
- Record
CVE-2002-1403- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
- Record
CVE-2002-1403- Updated
- 2026-11-02
EUVDEUVD-2002-1386No score
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
- Record
EUVD-2002-1386- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cjv5-r44f-hxgjNo score
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via...
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
- Record
GHSA-cjv5-r44f-hxgj- Updated
- 2026-11-02
OSVNo score
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
- Record
CVE-2002-1403- Updated
- 2026-11-02
OSVDEBIAN-CVE-2002-1403No score
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
- Record
DEBIAN-CVE-2002-1403- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
mandrakesoft.com/security/advisories?name=MDKSA-2003:003
debian.org/security/2002/dsa-219
securityfocus.com/bid/6200
marc.info?l=bugtraq&m=104189546709447&w=2
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000549
exchange.xforce.ibmcloud.com/vulnerabilities/10663
nvd.nist.gov/vuln/detail/CVE-2002-1403
github.com/advisories/GHSA-cjv5-r44f-hxgj
security-tracker.debian.org/tracker/CVE-2002-1403