7.5

CVE-2002-0836

dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.

Data is provided by the National Vulnerability Database (NVD)
Hp ≫ Secure Os Version1.0 Editionlinux
Mandrakesoft ≫ Mandrake Linux Version7.2
Mandrakesoft ≫ Mandrake Linux Version8.0
Mandrakesoft ≫ Mandrake Linux Version8.0 Editionppc
Mandrakesoft ≫ Mandrake Linux Version8.1
Mandrakesoft ≫ Mandrake Linux Version8.1 Editionia64
Mandrakesoft ≫ Mandrake Linux Version8.2
Mandrakesoft ≫ Mandrake Linux Version8.2 Editionppc
Mandrakesoft ≫ Mandrake Linux Version9.0
Redhat ≫ Linux Version6.2
Redhat ≫ Linux Version6.2 Editionalpha
Redhat ≫ Linux Version6.2 Editioni386
Redhat ≫ Linux Version6.2 Editionsparc
Redhat ≫ Linux Version7.0
Redhat ≫ Linux Version7.0 Editionalpha
Redhat ≫ Linux Version7.0 Editioni386
Redhat ≫ Linux Version7.1
Redhat ≫ Linux Version7.1 Editionalpha
Redhat ≫ Linux Version7.1 Editioni386
Redhat ≫ Linux Version7.1 Editionia64
Redhat ≫ Linux Version7.2
Redhat ≫ Linux Version7.2 Editioni386
Redhat ≫ Linux Version7.2 Editionia64
Redhat ≫ Linux Version7.3
Redhat ≫ Linux Version7.3 Editioni386
Redhat ≫ Linux Version8.0
Redhat ≫ Linux Version8.0 Editioni386
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 14.13% 0.942
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P