Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-0542. PoCs published by Przemyslaw Frasunek.
AI-analyzed exploit summary This exploit leverages a vulnerability in OpenBSD's default cron jobs where the mail(1) utility processes escaped characters in message text as commands. The PoC creates a file with a malicious escape sequence that, when processed by mail(1), executes a command to set /bin/sh as suid root.
Description
mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cron.
Exploits (1)
This exploit leverages a vulnerability in OpenBSD's default cron jobs where the mail(1) utility processes escaped characters in message text as commands. The PoC creates a file with a malicious escape sequence that, when processed by mail(1), executes a command to set /bin/sh as suid root.