Read the docs
TI-2002-01428 Aliases CVE-2002-1506GHSA-fp37-6m3m-pxjx

Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code…

Priority LOW 35Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, which overflows an error string that is generated.

Why it matters now

EPSS 0.0161 76th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 33

CPEVersionsRoleVendor
cpe:2.3:a:jacques_gelinas:linuxconf:1.1.6r10:*:*:*:*:*:*:*1.1.6r10VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.1.7:*:*:*:*:*:*:*1.1.7VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.1.8:*:*:*:*:*:*:*1.1.8VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.1.9r1:*:*:*:*:*:*:*1.1.9r1VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.1.9r2:*:*:*:*:*:*:*1.1.9r2VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2:*:*:*:*:*:*:*1.2VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1:*:*:*:*:*:*:*1.2.1VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r1:*:*:*:*:*:*:*1.2.1r1VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r2:*:*:*:*:*:*:*1.2.1r2VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r3:*:*:*:*:*:*:*1.2.1r3VulnerableJacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.1.6r10:*:*:*:*:*:*:* Versions 1.1.6r10 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.1.7:*:*:*:*:*:*:* Versions 1.1.7 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.1.8:*:*:*:*:*:*:* Versions 1.1.8 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.1.9r1:*:*:*:*:*:*:* Versions 1.1.9r1 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.1.9r2:*:*:*:*:*:*:* Versions 1.1.9r2 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r1:*:*:*:*:*:*:* Versions 1.2.1r1 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r2:*:*:*:*:*:*:* Versions 1.2.1r2 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r3:*:*:*:*:*:*:* Versions 1.2.1r3 Vulnerable ·Jacques Gelinas
Show 23 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r4:*:*:*:*:*:*:*1.2.1r4VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r5:*:*:*:*:*:*:*1.2.1r5VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r6:*:*:*:*:*:*:*1.2.1r6VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r7:*:*:*:*:*:*:*1.2.1r7VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r8:*:*:*:*:*:*:*1.2.1r8VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2.2:*:*:*:*:*:*:*1.2.2VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2.3:*:*:*:*:*:*:*1.2.3VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2.3r1:*:*:*:*:*:*:*1.2.3r1VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2.3r2:*:*:*:*:*:*:*1.2.3r2VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2.4:*:*:*:*:*:*:*1.2.4VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2.4r2:*:*:*:*:*:*:*1.2.4r2VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2.4r4:*:*:*:*:*:*:*1.2.4r4VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2.4r5:*:*:*:*:*:*:*1.2.4r5VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2r1:*:*:*:*:*:*:*1.2r1VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.2r2:*:*:*:*:*:*:*1.2r2VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.27:*:*:*:*:*:*:*1.27VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.27r3:*:*:*:*:*:*:*1.27r3VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.27r4:*:*:*:*:*:*:*1.27r4VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.27r5:*:*:*:*:*:*:*1.27r5VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.28:*:*:*:*:*:*:*1.28VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.28r1:*:*:*:*:*:*:*1.28r1VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.28r2:*:*:*:*:*:*:*1.28r2VulnerableJacques Gelinas
cpe:2.3:a:jacques_gelinas:linuxconf:1.28r3:*:*:*:*:*:*:*1.28r3VulnerableJacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r4:*:*:*:*:*:*:* Versions 1.2.1r4 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r5:*:*:*:*:*:*:* Versions 1.2.1r5 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r6:*:*:*:*:*:*:* Versions 1.2.1r6 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r7:*:*:*:*:*:*:* Versions 1.2.1r7 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r8:*:*:*:*:*:*:* Versions 1.2.1r8 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2.3:*:*:*:*:*:*:* Versions 1.2.3 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2.3r1:*:*:*:*:*:*:* Versions 1.2.3r1 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2.3r2:*:*:*:*:*:*:* Versions 1.2.3r2 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2.4:*:*:*:*:*:*:* Versions 1.2.4 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2.4r2:*:*:*:*:*:*:* Versions 1.2.4r2 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2.4r4:*:*:*:*:*:*:* Versions 1.2.4r4 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2.4r5:*:*:*:*:*:*:* Versions 1.2.4r5 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2r1:*:*:*:*:*:*:* Versions 1.2r1 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.2r2:*:*:*:*:*:*:* Versions 1.2r2 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.27:*:*:*:*:*:*:* Versions 1.27 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.27r3:*:*:*:*:*:*:* Versions 1.27r3 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.27r4:*:*:*:*:*:*:* Versions 1.27r4 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.27r5:*:*:*:*:*:*:* Versions 1.27r5 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.28:*:*:*:*:*:*:* Versions 1.28 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.28r1:*:*:*:*:*:*:* Versions 1.28r1 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.28r2:*:*:*:*:*:*:* Versions 1.28r2 Vulnerable ·Jacques Gelinas
  • cpe:2.3:a:jacques_gelinas:linuxconf:1.28r3:*:*:*:*:*:*:* Versions 1.28r3 Vulnerable ·Jacques Gelinas

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2002-1506
  2. 2026-10-03 Alias added: GHSA-fp37-6m3m-pxjx

References

Exploit 1

Patch 1

Other 2

  • TI-2002-01222 The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux… CVSS 2.0HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences