CVE-2002-1506: Jacques Gelinas Linuxconf

High severity, CVSS 7.2. EPSS: 1.6% chance of exploitation in the next 30 days.

Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, which overflows an error string that is generated.

Affected products

• Jacques Gelinas Linuxconf: version 1.1.6r10 only; version 1.1.7 only; version 1.1.8 only; version 1.1.9r1 only; version 1.1.9r2 only; version 1.2 only; …

Published 2003-04-02. Last modified 2026-06-16.