PT-2002-1519 · Ecartis · Ecartis

Published 2002-06-11 · Updated 2016-10-18 · CVE-2002-0468

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ecartis versions 1.0.0 and earlier

Description The issue concerns buffer overflows that can be exploited by local users to gain privileges. This can be achieved through a long command line argument that is not properly handled in core.c. Additionally, there might be bad uses of sprintf() in various files, including moderate.c, lcgi.c, fileapi.c, cookie.c, and codes.c, which could potentially lead to exploitation.

Recommendations For Ecartis version 1.0.0 and earlier, consider restricting access to the command line argument and limiting the use of sprintf() in the mentioned files until a patch is available. As a temporary workaround, consider disabling the execution of long command line arguments in core.c to minimize the risk of exploitation. Restrict access to the files moderate.c, lcgi.c, fileapi.c, cookie.c, and codes.c to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2002-0468

Affected Products

Ecartis

References · 11

• 🔥 https://exploit-db.com/exploits/21341 · Exploit
• 🔥 https://exploit-db.com/exploits/21342 · Exploit
• http://online.securityfocus.com/archive/1/269879 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0468 · Security Note
• http://online.securityfocus.com/archive/82/258763 · Vendor Advisory
• http://online.securityfocus.com/archive/1/269658 · Vendor Advisory
• http://securityfocus.com/archive/1/261209 · Note
• http://ecartis.org · Note
• http://iss.net/security_center/static/8445.php · Note
• http://securityfocus.com/bid/4271 · Note
• http://marc.info/?l=listar-support&m=101590272221720&w=2 · Note