Lucene search

MitreCVE-2002-0836

HistorySep 01, 2004 - 4:00 a.m.

CVE-2002-0836

2004-09-0104:00:00

mitre

web.nvd.nist.gov

cve

dvips

postscript

tetex

remote attackers

arbitrary commands

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.013

Percentile

86.3%

JSON

dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.

Affected configurations

Nvd

Node

hpsecure_osMatch1.0linux

mandrakesoftmandrake_linuxMatch7.2

mandrakesoftmandrake_linuxMatch8.0

mandrakesoftmandrake_linuxMatch8.0ppc

mandrakesoftmandrake_linuxMatch8.1

mandrakesoftmandrake_linuxMatch8.1ia64

mandrakesoftmandrake_linuxMatch8.2

mandrakesoftmandrake_linuxMatch8.2ppc

mandrakesoftmandrake_linuxMatch9.0

redhatlinuxMatch6.2

redhatlinuxMatch6.2alpha

redhatlinuxMatch6.2i386

redhatlinuxMatch6.2sparc

redhatlinuxMatch7.0

redhatlinuxMatch7.0alpha

redhatlinuxMatch7.0i386

redhatlinuxMatch7.1

redhatlinuxMatch7.1alpha

redhatlinuxMatch7.1i386

redhatlinuxMatch7.1ia64

redhatlinuxMatch7.2

redhatlinuxMatch7.2i386

redhatlinuxMatch7.2ia64

redhatlinuxMatch7.3

redhatlinuxMatch7.3i386

redhatlinuxMatch8.0

redhatlinuxMatch8.0i386

VendorProductVersionCPE
hpsecure_os1.0cpe:2.3:o:hp:secure_os:1.0:*:linux:*:*:*:*:*
mandrakesoftmandrake_linux7.2cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*
mandrakesoftmandrake_linux8.0cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*
mandrakesoftmandrake_linux8.0cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:ppc:*:*:*:*:*
mandrakesoftmandrake_linux8.1cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*
mandrakesoftmandrake_linux8.1cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:ia64:*:*:*:*:*
mandrakesoftmandrake_linux8.2cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*
mandrakesoftmandrake_linux8.2cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:ppc:*:*:*:*:*
mandrakesoftmandrake_linux9.0cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*
redhatlinux6.2cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	secure_os	1.0	cpe:2.3:o:hp:secure_os:1.0::linux:::::
mandrakesoft	mandrake_linux	7.2	cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:::::::*
mandrakesoft	mandrake_linux	8.0	cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:::::::*
mandrakesoft	mandrake_linux	8.0	cpe:2.3:o:mandrakesoft:mandrake_linux:8.0::ppc:::::
mandrakesoft	mandrake_linux	8.1	cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:::::::*
mandrakesoft	mandrake_linux	8.1	cpe:2.3:o:mandrakesoft:mandrake_linux:8.1::ia64:::::
mandrakesoft	mandrake_linux	8.2	cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:::::::*
mandrakesoft	mandrake_linux	8.2	cpe:2.3:o:mandrakesoft:mandrake_linux:8.2::ppc:::::
mandrakesoft	mandrake_linux	9.0	cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:::::::*
redhat	linux	6.2	cpe:2.3:o:redhat:linux:6.2:::::::*