PT-2002-1518 · Listary · Ecartis

Published 2002-06-11 · Updated 2008-09-05 · CVE-2002-0467

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ecartis (formerly Listar) versions 1.0.0 through 20020124

Description The issue allows remote attackers to execute arbitrary code. This is achieved through buffer overflows in certain functions, including address match() of mystring.c or other functions in tolist.c.

Recommendations For Ecartis (formerly Listar) versions 1.0.0 through 20020124, update to a version after snapshot 20020125 to resolve the issue.

Fix

Related Identifiers

CVE-2002-0467

Affected Products

Ecartis

References · 7

• http://securityfocus.com/archive/1/261209 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0467 · Security Note
• http://securityfocus.com/bid/4176 · Vendor Advisory
• http://iss.net/security_center/static/8284.php · Vendor Advisory
• http://debian.org/security/2002/dsa-123 · Vendor Advisory
• http://ecartis.org · Note
• http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0063.html · Note