CVE-2002-0836

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537
http://marc.info/?l=bugtraq&m=103497852330838&w=2
http://marc.info/?l=bugtraq&m=104005975415582&w=2
http://www.debian.org/security/2002/dsa-207Patch, Vendor Advisory
http://www.iss.net/security_center/static/10365.phpVendor Advisory
http://www.kb.cert.org/vuls/id/169841US Government Resource
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php
http://www.redhat.com/support/errata/RHSA-2002-194.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2002-195.html
http://www.securityfocus.com/advisories/4567
http://www.securityfocus.com/bid/5978Patch, Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537
http://marc.info/?l=bugtraq&m=103497852330838&w=2
http://marc.info/?l=bugtraq&m=104005975415582&w=2
http://www.debian.org/security/2002/dsa-207Patch, Vendor Advisory
http://www.iss.net/security_center/static/10365.phpVendor Advisory
http://www.kb.cert.org/vuls/id/169841US Government Resource
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php
http://www.redhat.com/support/errata/RHSA-2002-194.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2002-195.html
http://www.securityfocus.com/advisories/4567
http://www.securityfocus.com/bid/5978Patch, Vendor Advisory

Timeline

Published: Oct 28, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-08377.5wordtrans 1.1pre8 and earlier in the wordtrans-web package allows remote attackers to (1) execute arbitrary code or (2) conduct cross-site s CVE-2002-08384.6Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kde CVE-2002-08397.2The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 s CVE-2002-08406.8Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalNam CVE-2002-08427.5Format string vulnerability in certain third party modifications to mod_dav for logging bad gateway messages (e.g. Oracle9i Application Serv CVE-2002-08437.5Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a maliciou CVE-2002-08447.8Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code.CVE-2002-08457.5Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chun CVE-2002-08467.5The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more d CVE-2002-08477.5tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice (double-free CVE-2002-08485.0Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of CVE-2002-08494.6Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat L