CVE-2002-0468
Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad uses of sprintf() in (2)…
Does this matter?
Lower severity and a low EPSS score (0.80%). Track it; it rarely justifies an emergency change on its own.
Description
Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad uses of sprintf() in (2) moderate.c, (3) lcgi.c, (4) fileapi.c, (5) cookie.c, (6) codes.c, or other files.
- CVSS 2.0
- 4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 0.80% probability · 54th percentile
- CISA KEV
- Not listed
- Affected
- ecartis/ecartis · listar/listar
- Source
- cve@mitre.org
References
- http://marc.info/?l=listar-support&m=101590272221720&w=2
- http://online.securityfocus.com/archive/1/269658Vendor Advisory
- http://online.securityfocus.com/archive/1/269879Vendor Advisory
- http://online.securityfocus.com/archive/82/258763Vendor Advisory
- http://www.ecartis.org/
- http://www.iss.net/security_center/static/8445.php
- http://www.securityfocus.com/archive/1/261209
- http://www.securityfocus.com/bid/4271
- http://marc.info/?l=listar-support&m=101590272221720&w=2
- http://online.securityfocus.com/archive/1/269658Vendor Advisory
- http://online.securityfocus.com/archive/1/269879Vendor Advisory
- http://online.securityfocus.com/archive/82/258763Vendor Advisory
- http://www.ecartis.org/
- http://www.iss.net/security_center/static/8445.php
- http://www.securityfocus.com/archive/1/261209
- http://www.securityfocus.com/bid/4271
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.