CVE-2002-1306

KDE 2.x-3.x < 3.0.4 - Buffer Overflow via Lisa Daemon and LAN URL Handler

Title source: manual
STIX 2.1

Description

Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly remote attackers to execute arbitrary code via the "lisa" daemon, and (2) remote attackers to execute arbitrary code via a certain "lan://" URL.

References (10)

Core 10
Core References
Various Sources vendor-advisory x_refsource_mandrake
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-080.php
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=103728981029342&w=2
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=103712329102632&w=2
Patch, Vendor Advisory x_refsource_confirm
http://www.kde.org/info/security/advisory-20021111-2.txt
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/10597.php
Third Party Advisory, US Government Resource third-party-advisory government-resource x_refsource_ciac
http://www.ciac.org/ciac/bulletins/n-020.shtml
Vendor Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/10598.php
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2002/dsa-214
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2002-220.html
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2002_042_kdenetwork.html

Scores

EPSS 0.0554
EPSS Percentile 90.4%

Details

Status published
Products (10)
kde/kde 2.1
kde/kde 2.1.1
kde/kde 2.1.2
kde/kde 2.2
kde/kde 2.2.1
kde/kde 2.2.2
kde/kde 3.0
kde/kde 3.0.1
kde/kde 3.0.2
kde/kde 3.0.3
Published Nov 29, 2002
Tracked Since Feb 18, 2026