CVE-2002-0542: OpenBSD

High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days.

mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cron.

Affected products

• OpenBSD OpenBSD: version 2.9 only; version 3.0 only

Published 2002-07-03. Last modified 2026-06-16.