Login Request a demo
Unscored severity · published Oct 28, 2002
CVE-2002-0836
dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print…
–
CVSS
8%
EPSS
No
On KEV
Description
dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.0% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Redhat
6.2; 6.2; 6.2; 6.2; 7.0; 7.0; +12 more · source: NVD
ML
Mandrake Linux · Mandrakesoft
7.2; 8.0; 8.0; 8.1; 8.1; 8.2; +2 more · source: NVD
SO
Secure OS · HP
1.0 · source: NVD
Affected product
SO
Secure OS
HP
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0836
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0836
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537
marc.info
http://marc.info/?l=bugtraq&m=103497852330838&w=2
marc.info
http://marc.info/?l=bugtraq&m=104005975415582&w=2
Patch
http://www.debian.org/security/2002/dsa-207
Vendor Advisory
http://www.iss.net/security_center/static/10365.php
US Government Resource
http://www.kb.cert.org/vuls/id/169841
More from Secure OS
–
CVE-2002-1232
Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large…
–
CVE-2002-0835
Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones
–
CVE-2002-0638
setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying…
–
CVE-2001-1506
Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional user privileges on some files beyond what is specified in…
–
CVE-2001-1563
Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources