CVE-2002-0062

HighCVSS 7.2/10Last modified Jul 23, 2026

Description

Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines for moving the physical cursor and scrolling."

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2002/dsa-113Patch, Vendor Advisory
http://www.iss.net/security_center/static/8222.phpThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2002-020.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/2116Patch, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.debian.org/security/2002/dsa-113Patch, Vendor Advisory
http://www.iss.net/security_center/static/8222.phpThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2002-020.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/2116Patch, Third Party Advisory, VDB Entry, Vendor Advisory

Timeline

Published: Mar 8, 2002
Last modified: Jul 23, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-00637.5Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attribute names or language CVE-2002-00647.2Funk Software Proxy Host 3.x is installed with insecure permissions for the registry and the file system.CVE-2002-00657.2Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the CVE-2002-00667.5Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access co CVE-2002-00677.5Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote a CVE-2002-00687.5Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an f CVE-2002-00692.6Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service.CVE-2002-00707.6Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a cu CVE-2002-00717.5Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attacke CVE-2002-00725.0The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not prop CVE-2002-00735.0The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial CVE-2002-00747.5Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attacke