Lucene search

K
cve[email protected]CVE-2002-0468
HistoryAug 12, 2002 - 4:00 a.m.

CVE-2002-0468

2002-08-1204:00:00
web.nvd.nist.gov
20
cve-2002-0468
buffer overflows
ecartis 1.0.0
privilege escalation
local users
nvd.

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad uses of sprintf() in (2) moderate.c, (3) lcgi.c, (4) fileapi.c, (5) cookie.c, (6) codes.c, or other files.

Affected configurations

NVD
Node
ecartisecartisMatch1.0.0_snapshot_2002-01-21
OR
ecartisecartisMatch1.0.0_snapshot_2002-01-25
OR
listarlistarMatch0.126a
OR
listarlistarMatch0.127a
OR
listarlistarMatch0.129a

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

Related for CVE-2002-0468