Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2002-0129

14
FAUCET Score

CVE-2002-0129 describes a local file disclosure vulnerability in efax version 0.9 and earlier. When efax is installed with setuid root permissions, local users can read arbitrary files by leveraging the -d option, which inadvertently prints file contents within a warning message. This is a low-severity vulnerability with a CVSS score of 2.1, requiring local access and low attack complexity to achieve partial confidentiality impact. There is no evidence of active exploitation, nor are there known public exploits in Metasploit, Nuclei, or ExploitDB, although it has garnered some community discussion.

Impacted Technologies

VendorProductVersion(s)CPE
0.8aCPE matchmatch criteria
cpe:2.3:a:efax:efax:0.8a:*:*:*:*:*:*:*
0.9CPE matchmatch criteria
cpe:2.3:a:efax:efax:0.9:*:*:*:*:*:*:*
0.9aCPE matchmatch criteria
cpe:2.3:a:efax:efax:0.9a:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

2.1LOW

AV:L/AC:L/Au:N/C:P/I:N/A:N

Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Exploitability Score
3.9
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
0.34%
Probability of exploitation in next 30 days
EPSS Percentile
26.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0034 is in the 24th percentile among its peer group of 2,096 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

microsoftpatch availablevia msrc
Product: cbl2 efax on CBL Mariner 2.0
microsoftpatch availablevia msrc
Product: 19636-16823

Vendor Advisories (1)

microsoft2002-Mar/CVE-2002-0129Low

efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message.

Mar 2, 2002

References

marc.info
seclists.org / bugtraq/2002/Jan/0212.html
iss.net / security_center/static/7921.php
Vendor Advisory
securityfocus.com / bid/3895