4.6med
CVE-2002-04682 exploits
Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long co…
Published 24 y ago · modified 4 mo ago · JSON
CVSS
4.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.8%
percentile 57%
Public exploits
2
Exploit-DB
Summary
Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad uses of sprintf() in (2) moderate.c, (3) lcgi.c, (4) fileapi.c, (5) cookie.c, (6) codes.c, or other files.
Exploit prediction (EPSS)
0.80% probability of exploitation in the next 30 days, higher than 57% of all scored CVEs.
Exploits and detections
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
References
- online.securityfocus.com /archive/82/258763 · mailing-list, x_refsource_VULN-DEV, x_transferred
- iss.net /security_center/static/8445.php · vdb-entry, x_refsource_XF, x_transferred
- online.securityfocus.com /archive/1/269879 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- ecartis.org / · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/4271 · vdb-entry, x_refsource_BID, x_transferred
- online.securityfocus.com /archive/1/269658 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securityfocus.com /archive/1/261209 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- marc.info /?l=listar-support&m=101590272221720&w=2 · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2002-0468
- NVD: CVE-2002-0468
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.