PT-2002-1868 · Suse · I4L

Published 2002-08-14 · Updated 2017-11-02 · CVE-2002-0854

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: i4l package on SuSE versions 7.3 through 8.0

Description: The issue is related to buffer overflows in the ISDN Point to Point Protocol (PPP) daemon (ipppd) in the i4l package, which may allow local users to gain privileges.

Recommendations: For SuSE versions 7.3 through 8.0, update the i4l package to a version that fixes the buffer overflow issue in the ipppd daemon.

Fix

Related Identifiers

CVE-2002-0854

Affected Products

I4L

References · 2

• https://lists.opensuse.org/opensuse-security-announce/2002-08/msg00006.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0854 · Security Note