7.5
CVE-2002-0836
- EPSS 7.95%
- Veröffentlicht 28.10.2002 05:00:00
- Zuletzt bearbeitet 16.06.2026 21:58:13
- Erkennungen
Logindvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mandrakesoft ≫ Mandrake Linux Version 7.2
Mandrakesoft ≫ Mandrake Linux Version 8.0
Mandrakesoft ≫ Mandrake Linux Version 8.0 Edition ppc
Mandrakesoft ≫ Mandrake Linux Version 8.1
Mandrakesoft ≫ Mandrake Linux Version 8.1 Edition ia64
Mandrakesoft ≫ Mandrake Linux Version 8.2
Mandrakesoft ≫ Mandrake Linux Version 8.2 Edition ppc
Mandrakesoft ≫ Mandrake Linux Version 9.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 7.95% | 0.94 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537
http://marc.info/?l=bugtraq&m=103497852330838&w=2
http://marc.info/?l=bugtraq&m=104005975415582&w=2
http://www.debian.org/security/2002/dsa-207
http://www.iss.net/security_center/static/10365.php
http://www.kb.cert.org/vuls/id/169841
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php
http://www.redhat.com/support/errata/RHSA-2002-194.html
http://www.redhat.com/support/errata/RHSA-2002-195.html
http://www.securityfocus.com/advisories/4567
http://www.securityfocus.com/bid/5978