ID CVE-2002-0467
Summary Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to execute arbitrary code via (1) address_match() of mystring.c or (2) other functions in tolist.c.
References
Vulnerable Configurations
  • cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-01-21:*:*:*:*:*:*:*
    cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-01-21:*:*:*:*:*:*:*
  • cpe:2.3:a:listar:listar:0.126a:*:*:*:*:*:*:*
    cpe:2.3:a:listar:listar:0.126a:*:*:*:*:*:*:*
  • cpe:2.3:a:listar:listar:0.127a:*:*:*:*:*:*:*
    cpe:2.3:a:listar:listar:0.127a:*:*:*:*:*:*:*
  • cpe:2.3:a:listar:listar:0.129a:*:*:*:*:*:*:*
    cpe:2.3:a:listar:listar:0.129a:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 05-09-2008 - 20:28)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 4176
bugtraq 20020310 Ecartis/Listar multiple vulnerabilities
confirm http://www.ecartis.org/
debian DSA-123
vulnwatch 20020311 [VulnWatch] Ecartis/Listar multiple vulnerabilities
xf ecartis-mystring-bo(8284)
Last major update 05-09-2008 - 20:28
Published 12-08-2002 - 04:00
Last modified 05-09-2008 - 20:28
Back to Top