CVE-2002-1506

Опубликовано: 02 апр. 2003

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, which overflows an error string that is generated.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-08/0304.html
Exploit
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0093.html
http://www.iss.net/security_center/static/9980.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5585
Exploit
Patch
Vendor Advisory
http://www.solucorp.qc.ca/changes.hc?projet=linuxconf&version=1.28r4
http://archives.neohapsis.com/archives/bugtraq/2002-08/0304.html
Exploit
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0093.html
http://www.iss.net/security_center/static/9980.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5585
Exploit
Patch
Vendor Advisory
http://www.solucorp.qc.ca/changes.hc?projet=linuxconf&version=1.28r4

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:jacques_gelinas:linuxconf:1.1.6r10:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.1.7:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.1.8:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.1.9r1:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.1.9r2:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r1:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r2:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r3:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r4:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r5:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r6:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r7:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2.1r8:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2.3r1:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2.3r2:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2.4r2:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2.4r4:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2.4r5:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2r1:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.2r2:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.27:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.27r3:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.27r4:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.27r5:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.28:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.28r1:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.28r2:*:*:*:*:*:*:*

cpe:2.3:a:jacques_gelinas:linuxconf:1.28r3:*:*:*:*:*:*:*

EPSS

Процентиль: 42%

0.002

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2002-1506

debian

больше 22 лет назад

Buffer overflow in Linuxconf before 1.28r4 allows local users to execu ...

GHSA-fp37-6m3m-pxjx

github

больше 3 лет назад