CVE-2002-1245: Frank Mcingvale Luxman

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users to modify /dev/mem and gain privileges via a modified PATH environment variable that points to a Trojan horse gzip program.

Affected products

Published 2002-11-12. Last modified 2026-06-16.