CVEvulnerability

CVE-2002-0468

4.6 MEDIUM Published 2002-08-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-08-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad uses of sprintf() in (2) moderate.c, (3) lcgi.c, (4) fileapi.c, (5) cookie.c, (6) codes.c, or other files.

Affected configurations

• ecartis ecartis 1.0.0 snapshot 2002-01-21 • ecartis ecartis 1.0.0 snapshot 2002-01-25 • listar listar 0.126a • listar listar 0.127a • listar listar 0.129a

References