7.2

CVE-2002-0062

Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines for moving the physical cursor and scrolling."

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version2.2 Edition68k
Debian ≫ Debian Linux Version2.2 Editionalpha
Debian ≫ Debian Linux Version2.2 Editionarm
Debian ≫ Debian Linux Version2.2 Editionia-32
Debian ≫ Debian Linux Version2.2 Editionpowerpc
Debian ≫ Debian Linux Version2.2 Editionsparc
Freebsd ≫ Freebsd Version3.1
Freebsd ≫ Freebsd Version3.2
Freebsd ≫ Freebsd Version3.3
Freebsd ≫ Freebsd Version3.4
Freebsd ≫ Freebsd Version3.5
Freebsd ≫ Freebsd Version3.5.1
Freebsd ≫ Freebsd Version4.0
Freebsd ≫ Freebsd Version4.1
Freebsd ≫ Freebsd Version4.1.1
Freebsd ≫ Freebsd Version5.0
Redhat ≫ Linux Version6.1 Editionalpha
Redhat ≫ Linux Version6.1 Editioni386
Redhat ≫ Linux Version6.1 Editionsparc
Redhat ≫ Linux Version7.0 Editionalpha
Redhat ≫ Linux Version7.0 Editioni386
Redhat ≫ Linux Version7.1 Editionalpha
Redhat ≫ Linux Version7.1 Editioni386
Redhat ≫ Linux Version7.2 Editioni386
Suse ≫ Suse Linux Version6.2
Suse ≫ Suse Linux Version6.3
Suse ≫ Suse Linux Version7.0
Gnu ≫ Ncurses Version < 5.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.427
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

http://www.securityfocus.com/bid/2116
Patch
Third Party Advisory
Vendor Advisory
VDB Entry