CVE-2002-1506

CVE-2002-1506 describes a buffer overflow vulnerability in Linuxconf versions prior to 1.28r4. This flaw allows a local attacker to execute arbitrary code by supplying an excessively long LINUXCONF_LANG environment variable, which overflows an internal error string buffer. With a CVSS score of 7.2, this vulnerability is considered high severity due to its local attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, multiple exploit proofs-of-concept are publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.