CVE-2002-0239

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Buffer overflow in hanterm 3.3.1 and earlier allows local users to execute arbitrary code via a long string in the (1) -fn, (2) -hfb, or (3) -hfn argument.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=101310874106455&w=2
http://online.securityfocus.com/archive/1/255168
http://securitytracker.com/id?1001950
http://www.debian.org/security/2002/dsa-112Patch, Vendor Advisory
http://www.iss.net/security_center/static/8109.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4050
http://marc.info/?l=bugtraq&m=101310874106455&w=2
http://online.securityfocus.com/archive/1/255168
http://securitytracker.com/id?1001950
http://www.debian.org/security/2002/dsa-112Patch, Vendor Advisory
http://www.iss.net/security_center/static/8109.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4050

Timeline

Published: May 29, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-02405.0PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pat CVE-2002-02417.5NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Di CVE-2002-02427.5Cross-site scripting vulnerability in Internet Explorer 6 earlier allows remote attackers to execute arbitrary script via an Extended HTML F CVE-2002-02437.5Cross-site scripting vulnerability in Opera 6.0 and earlier allows remote attackers to execute arbitrary script via an Extended HTML Form, w CVE-2002-02447.5Directory traversal vulnerability in chroot function in AtheOS 0.3.7 allows attackers to escape the jail via a .. (dot dot) in the pathname CVE-2002-02457.5Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the server via a request for a CVE-2002-02467.2Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying th CVE-2002-02477.2Buffer overflows in wmtv 0.6.5 and earlier may allow local users to gain privileges.CVE-2002-02487.2wmtv 0.6.5 and earlier allows local users to modify arbitrary files via a symlink attack on a configuration file.CVE-2002-02495.0PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the CVE-2002-02507.5Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users CVE-2002-02517.5Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code v