Skip to content
CVE Tracker
Back

CVE-2002-0043

sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain…

High7.2EPSS 0.93%
Published
Updated
Reserved
Assigned by
mitre

Description

sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain root privileges by modifying environment variables and changing how the mail program is invoked.

Scores

CVSS scores of CVE-2002-0043, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified2.0High7.2AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS (exploitation in 30 days)
0.93% · top 39% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.2.

Weakness

  • n/a

Affected products

  • n/a

    • affected n/a

References (12)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .