CVE-2002-1957 Buffer overflow in the netlog function in pen.c for Pen 0.9.1 and 0.9.2 allows remote attackers to execute arbitrary commands via malformed log messages.
HighCVSS 7.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the netlog function in pen.c for Pen 0.9.1 and 0.9.2 allows remote attackers to execute arbitrary commands via malformed log messages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pen | = 0.9.1 | No fix listed |
| pen | = 0.9.2 | No fix listed |
References
- siag.nu
- pen-netlog-bo(9505) patch vdb-entry
- 5152 patch vdb-entry
- Debian Security Tracker CVE-2002-1957 vendor-advisory