marc.info
http://marc.info/?l=listar-support&m=101590272221720&w=2 CVE-2002-0468
Ecartis 1.0.0/0.129 a Listar - Multiple Local Buffer Overflow Vulnerabilities (1)
Record summary
CVE-2002-0468 has a selected CVSS score of 4.6; EIP currently links 2 catalogued exploits.
Description
Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad uses of sprintf() in (2) moderate.c, (3) lcgi.c, (4) fileapi.c, (5) cookie.c, (6) codes.c, or other files.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBEcartis 1.0.0/0.129 a Listar - Multiple Local Buffer Overflow Vulnerabilities (1)ExploitDB exploitby the itchNot analyzed1 file
ExploitDBEcartis 1.0.0/0.129 a Listar - Multiple Local Buffer Overflow Vulnerabilities (2)ExploitDB exploitby the itchNot analyzed1 file
References
920020425 ecartis / listar PoCmailing list
http://online.securityfocus.com/archive/1/269658 20020427 Response to KF about Listar/Ecartis Vulnerabilitymailing list
http://online.securityfocus.com/archive/1/269879 20020227 listar / ecaris remote or local?mailing list
http://online.securityfocus.com/archive/82/258763 ecartis.orgConfirmation
http://www.ecartis.org/ ecartis-local-bo(8445)vdb entry
http://www.iss.net/security_center/static/8445.php 20020310 Ecartis/Listar multiple vulnerabilitiesmailing list
http://www.securityfocus.com/archive/1/261209 4271vdb entry
http://www.securityfocus.com/bid/4271 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-0468