PT-2002-1024 · Epic4 · Light

Published 2002-09-24 · Updated 2008-09-10 · CVE-2002-0984

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Light versions 2.7.x through 2.7.29 Light versions 2.8.x through 2.8pre9

Description The issue allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code. Multiple vulnerabilities in the epic4-script-light package may lead to disruption of confidentiality, integrity, and availability of protected information, and can be exploited remotely.

Recommendations For Light versions 2.7.x through 2.7.29, update to version 2.7.30p5 or later. For Light versions 2.8.x through 2.8pre9, update to version 2.8pre10 or later.

Fix

Related Identifiers

BDU:2015-03470

CVE-2002-0984

DSA-156

Affected Products

Light

References · 8

• https://bdu.fstec.ru/vul/2015-03470 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0984 · Security Note
• http://debian.org/security/2002/dsa-156 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0984 · Security Note
• http://iss.net/security_center/static/9943.php · Note
• http://archives.neohapsis.com/archives/bugtraq/2002-08/0231.html · Note
• http://securityfocus.com/bid/5555 · Note
• http://debian.org/security/dsa-156 · Note