CVE-2002-0851

Опубликовано: 05 сент. 2002

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows local users to gain root privileges via format strings in the device name command line argument, which is not properly handled in a call to syslog.

Ссылки

http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0068.html
Exploit
Vendor Advisory
http://www.iss.net/security_center/static/9811.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5437
Exploit
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0068.html
Exploit
Vendor Advisory
http://www.iss.net/security_center/static/9811.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5437
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:isdn4linux:isdn4linux:3.1_pre1:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.00639

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2002-0851

debian

почти 23 года назад

Format string vulnerability in ISDN Point to Point Protocol (PPP) daem ...

GHSA-vx52-4cmh-xrv5

github

больше 3 лет назад