CVE-2002-0467 Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to execute arbitrary code via (1) address_match() of mystring.c or (2) other functions in tolist.c.
HighCVSS 10.0
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to execute arbitrary code via (1) address_match() of mystring.c or (2) other functions in tolist.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ecartis | = 1.0.0_snapshot_2002-01-21 | No fix listed |
| listar | = 0.126a | No fix listed |
| listar | = 0.127a | No fix listed |
| listar | = 0.129a | No fix listed |
References
- 20020311 [VulnWatch] Ecartis/Listar multiple vulnerabilities mailing-list
- DSA-123 vendor-advisory
- www.ecartis.org
- ecartis-mystring-bo(8284) patch vdb-entry vendor-advisory
- 20020310 Ecartis/Listar multiple vulnerabilities mailing-list vendor-advisory
- 4176 patch vdb-entry vendor-advisory