7.5

CVE-2002-0836

dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Secure Os Version1.0 Editionlinux
Mandrakesoft ≫ Mandrake Linux Version7.2
Mandrakesoft ≫ Mandrake Linux Version8.0
Mandrakesoft ≫ Mandrake Linux Version8.0 Editionppc
Mandrakesoft ≫ Mandrake Linux Version8.1
Mandrakesoft ≫ Mandrake Linux Version8.1 Editionia64
Mandrakesoft ≫ Mandrake Linux Version8.2
Mandrakesoft ≫ Mandrake Linux Version8.2 Editionppc
Mandrakesoft ≫ Mandrake Linux Version9.0
Redhat ≫ Linux Version6.2
Redhat ≫ Linux Version6.2 Editionalpha
Redhat ≫ Linux Version6.2 Editioni386
Redhat ≫ Linux Version6.2 Editionsparc
Redhat ≫ Linux Version7.0
Redhat ≫ Linux Version7.0 Editionalpha
Redhat ≫ Linux Version7.0 Editioni386
Redhat ≫ Linux Version7.1
Redhat ≫ Linux Version7.1 Editionalpha
Redhat ≫ Linux Version7.1 Editioni386
Redhat ≫ Linux Version7.1 Editionia64
Redhat ≫ Linux Version7.2
Redhat ≫ Linux Version7.2 Editioni386
Redhat ≫ Linux Version7.2 Editionia64
Redhat ≫ Linux Version7.3
Redhat ≫ Linux Version7.3 Editioni386
Redhat ≫ Linux Version8.0
Redhat ≫ Linux Version8.0 Editioni386
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 14.13% 0.941
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P