CVE-2002-0468

Published Aug 12, 2002

Last updated 8 years ago

Overview

Description: Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad uses of sprintf() in (2) moderate.c, (3) lcgi.c, (4) fileapi.c, (5) cookie.c, (6) codes.c, or other files.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.6
Impact score: 6.4
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-01-21:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2C9FD55B-466F-4385-AF88-E341B7C5A32D"
          },
          {
            "criteria": "cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-01-25:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "240D0A65-FC01-4B21-9821-A786F5677785"
          },
          {
            "criteria": "cpe:2.3:a:listar:listar:0.126a:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "65AE2735-44FB-4FCB-A520-7348ADE6F464"
          },
          {
            "criteria": "cpe:2.3:a:listar:listar:0.127a:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AA66A07F-CDF5-40DB-B999-7AA7C5000AF3"
          },
          {
            "criteria": "cpe:2.3:a:listar:listar:0.129a:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C15B56B6-ADC6-4D37-A561-914F52B73AAC"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References