CVE-2002-0468

Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad uses of sprintf() in (2) moderate.c, (3) lcgi.c, (4) fileapi.c, (5) cookie.c, (6) codes.c, or other files.

CVSS v2.0

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.80% chance of exploitation in the next 30 days, 54th percentile

Published

2002-06-11

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://online.securityfocus.com/archive/1/269658

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/21342
• https://www.exploit-db.com/exploits/21341

References

• CVE Record
• NVD entry

Related

• CVE-2002-0461
• CVE-2002-0483
• CVE-2002-0454
• CVE-2002-0484
• CVE-2002-0451
• CVE-2002-0486