CVE-2002-1158 Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user.
HighCVSS 7.2
EPSS 0.49%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| canna | <= 3.5b2 | No fix listed |
| debian/canna(Debian:12) | < 3.6p1-1 | 3.6p1-1 |
| debian/canna(Debian:13) | < 3.6p1-1 | 3.6p1-1 |
| debian/canna(Debian:14) | < 3.6p1-1 | 3.6p1-1 |
References
- canna.sourceforge.jp
- 20021220 GLSA: canna mailing-list
- DSA-224 vendor-advisory
- RHSA-2002:246 patch vendor-advisory
- RHSA-2002:261 vendor-advisory
- RHSA-2003:115 vendor-advisory
- 6351 patch vdb-entry vendor-advisory
- canna-irwthrough-bo(10831) vdb-entry
- Debian Security Tracker CVE-2002-1158 vendor-advisory