Lucene search

MitreCVE-2001-1002

HistoryJun 25, 2002 - 4:00 a.m.

CVE-2001-1002

2002-06-2504:00:00

mitre

web.nvd.nist.gov

red hat linux

dvi print filter

remote attackers

privilege escalation

cve-2001-1002

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0.027

Percentile

90.6%

JSON

The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands.

Affected configurations

Nvd

Node

redhatlinuxMatch6.2

redhatlinuxMatch7.0

redhatlinuxMatch7.1

VendorProductVersionCPE
redhatlinux6.2cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*
redhatlinux7.0cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*
redhatlinux7.1cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	linux	6.2	cpe:2.3:o:redhat:linux:6.2:::::::*
redhat	linux	7.0	cpe:2.3:o:redhat:linux:7.0:::::::*
redhat	linux	7.1	cpe:2.3:o:redhat:linux:7.1:::::::*

References

marc.info/?l=bugtraq&m=99892644616749&w=2

www.redhat.com/support/errata/RHSA-2001-102.html

www.securityfocus.com/bid/3241

exchange.xforce.ibmcloud.com/vulnerabilities/16509

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0.027

Percentile

90.6%

JSON

Related for CVE-2001-1002