CVE-2002-0467

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to execute arbitrary code via (1) address_match() of mystring.c or (2) other functions in tolist.c.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0063.html
http://www.debian.org/security/2002/dsa-123
http://www.ecartis.org/
http://www.iss.net/security_center/static/8284.phpPatch, Vendor Advisory
http://www.securityfocus.com/archive/1/261209Vendor Advisory
http://www.securityfocus.com/bid/4176Patch, Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0063.html
http://www.debian.org/security/2002/dsa-123
http://www.ecartis.org/
http://www.iss.net/security_center/static/8284.phpPatch, Vendor Advisory
http://www.securityfocus.com/archive/1/261209Vendor Advisory
http://www.securityfocus.com/bid/4176Patch, Vendor Advisory

Timeline

Published: Aug 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-04684.6Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long com CVE-2002-04697.2Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, "l CVE-2002-04707.2PHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program, which could allow local users to gain privil CVE-2002-047110.0PHPNetToolpack 0.1 allows remote attackers to execute arbitrary code via shell metacharacters in the a_query variable.CVE-2002-04725.0MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remo CVE-2002-047310.0db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the phpbb_root_p CVE-2002-04745.1Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients by embedding the scri CVE-2002-04755.1Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embe CVE-2002-04765.0Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumen CVE-2002-04777.5Standalone Macromedia Flash Player 5.0 before 5,0,30,2 allows remote attackers to execute arbitrary programs via a .SWF file containing the CVE-2002-04785.0The default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify sensitive information via arbitrary SNMP comm CVE-2002-04797.2Gravity Storm Service Pack Manager 2000 creates a hidden share (SPM2000c$) mapped to the C drive, which may allow local users to bypass acce