Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-0043. PoCs published by Charles Stevenson.
AI-analyzed exploit summary This exploit leverages a sudo environment variable sanitization flaw (CVE-2002-0043) to execute arbitrary commands as root by manipulating Postfix configuration via the MAIL_CONFIG environment variable. It creates a setuid root shell by abusing the debugger_command directive in Postfix.
Description
sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain root privileges by modifying environment variables and changing how the mail program is invoked.
Exploits (1)
This exploit leverages a sudo environment variable sanitization flaw (CVE-2002-0043) to execute arbitrary commands as root by manipulating Postfix configuration via the MAIL_CONFIG environment variable. It creates a setuid root shell by abusing the debugger_command directive in Postfix.