← Database

CVE-2002-2017

CRITICAL CVSS: 10.0 Published: 2002-12-31 Modified: 2026-06-16

Description

sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, which is then executed by sastcpd.

Affected Platforms

Sas BaseSas Integration Technologies

Weakness Type

NVD-CWE-Other

References