CVE-2002-0836 (GCVE-0-2002-0836)
Vulnerability from cvelistv5 – Published: 2004-09-01 04:00 – Updated: 2024-08-08 03:03
VLAI?
Summary
dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T03:03:49.020Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20021018 GLSA: tetex",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=103497852330838\u0026w=2"
},
{
"name": "5978",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/5978"
},
{
"name": "20021216 [OpenPKG-SA-2002.015] OpenPKG Security Advisory (tetex)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=104005975415582\u0026w=2"
},
{
"name": "CLA-2002:537",
"tags": [
"vendor-advisory",
"x_refsource_CONECTIVA",
"x_transferred"
],
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000537"
},
{
"name": "VU#169841",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/169841"
},
{
"name": "DSA-207",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2002/dsa-207"
},
{
"name": "HPSBTL0210-073",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://www.securityfocus.com/advisories/4567"
},
{
"name": "RHSA-2002:195",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2002-195.html"
},
{
"name": "dvips-system-execute-commands(10365)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "http://www.iss.net/security_center/static/10365.php"
},
{
"name": "RHSA-2002:194",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2002-194.html"
},
{
"name": "MDKSA-2002:070",
"tags": [
"vendor-advisory",
"x_refsource_MANDRAKE",
"x_transferred"
],
"url": "http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2002-10-14T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2004-07-25T00:00:00",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20021018 GLSA: tetex",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=103497852330838\u0026w=2"
},
{
"name": "5978",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/5978"
},
{
"name": "20021216 [OpenPKG-SA-2002.015] OpenPKG Security Advisory (tetex)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=104005975415582\u0026w=2"
},
{
"name": "CLA-2002:537",
"tags": [
"vendor-advisory",
"x_refsource_CONECTIVA"
],
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000537"
},
{
"name": "VU#169841",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/169841"
},
{
"name": "DSA-207",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2002/dsa-207"
},
{
"name": "HPSBTL0210-073",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://www.securityfocus.com/advisories/4567"
},
{
"name": "RHSA-2002:195",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2002-195.html"
},
{
"name": "dvips-system-execute-commands(10365)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "http://www.iss.net/security_center/static/10365.php"
},
{
"name": "RHSA-2002:194",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2002-194.html"
},
{
"name": "MDKSA-2002:070",
"tags": [
"vendor-advisory",
"x_refsource_MANDRAKE"
],
"url": "http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2002-0836",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20021018 GLSA: tetex",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=103497852330838\u0026w=2"
},
{
"name": "5978",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/5978"
},
{
"name": "20021216 [OpenPKG-SA-2002.015] OpenPKG Security Advisory (tetex)",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=104005975415582\u0026w=2"
},
{
"name": "CLA-2002:537",
"refsource": "CONECTIVA",
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000537"
},
{
"name": "VU#169841",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/169841"
},
{
"name": "DSA-207",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2002/dsa-207"
},
{
"name": "HPSBTL0210-073",
"refsource": "HP",
"url": "http://www.securityfocus.com/advisories/4567"
},
{
"name": "RHSA-2002:195",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2002-195.html"
},
{
"name": "dvips-system-execute-commands(10365)",
"refsource": "XF",
"url": "http://www.iss.net/security_center/static/10365.php"
},
{
"name": "RHSA-2002:194",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2002-194.html"
},
{
"name": "MDKSA-2002:070",
"refsource": "MANDRAKE",
"url": "http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2002-0836",
"datePublished": "2004-09-01T04:00:00",
"dateReserved": "2002-08-08T00:00:00",
"dateUpdated": "2024-08-08T03:03:49.020Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:hp:secure_os:1.0:*:linux:*:*:*:*:*\", \"matchCriteriaId\": \"B345284D-6842-47C0-B823-B5DDC30CC8A6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4371A667-18E1-4C54-B2E1-6F885F22F213\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:ppc:*:*:*:*:*\", \"matchCriteriaId\": \"5B28763D-8F4B-45E5-82FA-AB7E54C18EBF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"205EF72B-7334-4AE0-9CA6-D2E8E5910C8E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:ia64:*:*:*:*:*\", \"matchCriteriaId\": \"613A22EC-D93C-48B0-B97C-3E0DDFBD0B62\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DEB99324-3062-426F-8E2F-44DC3A7ADB2A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:ppc:*:*:*:*:*\", \"matchCriteriaId\": \"128F5289-E9F3-41A7-A534-FBAA8A119A9F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"33F6F859-B7B8-4072-B073-6CC8291D642E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0633B5A6-7A88-4A96-9462-4C09D124ED36\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*\", \"matchCriteriaId\": \"344610A8-DB6D-4407-9304-916C419F648C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*\", \"matchCriteriaId\": \"B7EC2B95-4715-4EC9-A10A-2542501F8A61\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*\", \"matchCriteriaId\": \"64775BEF-2E53-43CA-8639-A7E54F6F4222\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"29B186E5-7C2F-466E-AA4A-8F2B618F8A14\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:7.0:*:alpha:*:*:*:*:*\", \"matchCriteriaId\": \"FD6576E2-9F26-4857-9F28-F51899F1EF48\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:*\", \"matchCriteriaId\": \"4DC9842D-E23B-4B9F-A7BF-57C3BA3DE398\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1D46E093-1C68-43BB-B281-12117EC8DE0F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:7.1:*:alpha:*:*:*:*:*\", \"matchCriteriaId\": \"7F3FAAB3-7A8A-42E5-9DCE-E4A843CED1B9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:7.1:*:i386:*:*:*:*:*\", \"matchCriteriaId\": \"C8783A6D-DFD8-45DD-BF03-570B1B012B44\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:7.1:*:ia64:*:*:*:*:*\", \"matchCriteriaId\": \"ED36543D-C21B-4B4B-A6AD-6E19B08B5DD7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E562907F-D915-4030-847A-3C6834A80D4E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:7.2:*:i386:*:*:*:*:*\", \"matchCriteriaId\": \"6A1EF00A-52E9-4FD8-98FD-3998225D8655\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:7.2:*:ia64:*:*:*:*:*\", \"matchCriteriaId\": \"9D47D6FE-56A9-42CF-9A9B-AEE272C061F7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"138985E6-5107-4E8B-A801-C3D5FE075227\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*\", \"matchCriteriaId\": \"9B502A61-44FB-4CD4-85BE-88D4ACCCA441\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"038FEDE7-986F-4CA5-9003-BA68352B87D4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:linux:8.0:*:i386:*:*:*:*:*\", \"matchCriteriaId\": \"4D1E6298-EDF5-438F-8DFD-16A514CB938A\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.\"}, {\"lang\": \"es\", \"value\": \"El conversor dvips para ficheros Postscript en el paquete tetex llama a la funci\\u00f3n system() de forma insegura, lo que permite a atacantes ejecutar comandos arbitrarios mediante ciertos trabajos de impresi\\u00f3n, posiblemente conteniendo fuentes.\"}]",
"id": "CVE-2002-0836",
"lastModified": "2024-11-20T23:39:58.930",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 7.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": true, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2002-10-28T05:00:00.000",
"references": "[{\"url\": \"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000537\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=103497852330838\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=104005975415582\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.debian.org/security/2002/dsa-207\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.iss.net/security_center/static/10365.php\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.kb.cert.org/vuls/id/169841\", \"source\": \"cve@mitre.org\", \"tags\": [\"US Government Resource\"]}, {\"url\": \"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2002-194.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2002-195.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/advisories/4567\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/bid/5978\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000537\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=103497852330838\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=104005975415582\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2002/dsa-207\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.iss.net/security_center/static/10365.php\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.kb.cert.org/vuls/id/169841\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"US Government Resource\"]}, {\"url\": \"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2002-194.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2002-195.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/advisories/4567\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/5978\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-Other\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2002-0836\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2002-10-28T05:00:00.000\",\"lastModified\":\"2025-04-03T01:03:51.193\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.\"},{\"lang\":\"es\",\"value\":\"El conversor dvips para ficheros Postscript en el paquete tetex llama a la funci\u00f3n system() de forma insegura, lo que permite a atacantes ejecutar comandos arbitrarios mediante ciertos trabajos de impresi\u00f3n, posiblemente conteniendo fuentes.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":true,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:hp:secure_os:1.0:*:linux:*:*:*:*:*\",\"matchCriteriaId\":\"B345284D-6842-47C0-B823-B5DDC30CC8A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4371A667-18E1-4C54-B2E1-6F885F22F213\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:ppc:*:*:*:*:*\",\"matchCriteriaId\":\"5B28763D-8F4B-45E5-82FA-AB7E54C18EBF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"205EF72B-7334-4AE0-9CA6-D2E8E5910C8E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:ia64:*:*:*:*:*\",\"matchCriteriaId\":\"613A22EC-D93C-48B0-B97C-3E0DDFBD0B62\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEB99324-3062-426F-8E2F-44DC3A7ADB2A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:ppc:*:*:*:*:*\",\"matchCriteriaId\":\"128F5289-E9F3-41A7-A534-FBAA8A119A9F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33F6F859-B7B8-4072-B073-6CC8291D642E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0633B5A6-7A88-4A96-9462-4C09D124ED36\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*\",\"matchCriteriaId\":\"344610A8-DB6D-4407-9304-916C419F648C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*\",\"matchCriteriaId\":\"B7EC2B95-4715-4EC9-A10A-2542501F8A61\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*\",\"matchCriteriaId\":\"64775BEF-2E53-43CA-8639-A7E54F6F4222\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"29B186E5-7C2F-466E-AA4A-8F2B618F8A14\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:7.0:*:alpha:*:*:*:*:*\",\"matchCriteriaId\":\"FD6576E2-9F26-4857-9F28-F51899F1EF48\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:*\",\"matchCriteriaId\":\"4DC9842D-E23B-4B9F-A7BF-57C3BA3DE398\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D46E093-1C68-43BB-B281-12117EC8DE0F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:7.1:*:alpha:*:*:*:*:*\",\"matchCriteriaId\":\"7F3FAAB3-7A8A-42E5-9DCE-E4A843CED1B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:7.1:*:i386:*:*:*:*:*\",\"matchCriteriaId\":\"C8783A6D-DFD8-45DD-BF03-570B1B012B44\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:7.1:*:ia64:*:*:*:*:*\",\"matchCriteriaId\":\"ED36543D-C21B-4B4B-A6AD-6E19B08B5DD7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E562907F-D915-4030-847A-3C6834A80D4E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:7.2:*:i386:*:*:*:*:*\",\"matchCriteriaId\":\"6A1EF00A-52E9-4FD8-98FD-3998225D8655\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:7.2:*:ia64:*:*:*:*:*\",\"matchCriteriaId\":\"9D47D6FE-56A9-42CF-9A9B-AEE272C061F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"138985E6-5107-4E8B-A801-C3D5FE075227\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*\",\"matchCriteriaId\":\"9B502A61-44FB-4CD4-85BE-88D4ACCCA441\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"038FEDE7-986F-4CA5-9003-BA68352B87D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux:8.0:*:i386:*:*:*:*:*\",\"matchCriteriaId\":\"4D1E6298-EDF5-438F-8DFD-16A514CB938A\"}]}]}],\"references\":[{\"url\":\"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000537\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=103497852330838\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=104005975415582\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2002/dsa-207\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.iss.net/security_center/static/10365.php\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.kb.cert.org/vuls/id/169841\",\"source\":\"cve@mitre.org\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2002-194.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2002-195.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/advisories/4567\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/5978\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000537\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=103497852330838\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=104005975415582\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2002/dsa-207\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.iss.net/security_center/static/10365.php\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.kb.cert.org/vuls/id/169841\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2002-194.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2002-195.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/advisories/4567\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/5978\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}"
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…