ByteOS Network

Vulnerability Details :

CVE-2002-0836

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-01 Sep, 2004 | 04:00

Updated At-08 Aug, 2024 | 03:03

dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:01 Sep, 2004 | 04:00

Updated At:08 Aug, 2024 | 03:03

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://marc.info/?l=bugtraq&m=103497852330838&w=2	mailing-list x_refsource_BUGTRAQ
http://www.securityfocus.com/bid/5978	vdb-entry x_refsource_BID
http://marc.info/?l=bugtraq&m=104005975415582&w=2	mailing-list x_refsource_BUGTRAQ
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537	vendor-advisory x_refsource_CONECTIVA
http://www.kb.cert.org/vuls/id/169841	third-party-advisory x_refsource_CERT-VN
http://www.debian.org/security/2002/dsa-207	vendor-advisory x_refsource_DEBIAN
http://www.securityfocus.com/advisories/4567	vendor-advisory x_refsource_HP
http://www.redhat.com/support/errata/RHSA-2002-195.html	vendor-advisory x_refsource_REDHAT
http://www.iss.net/security_center/static/10365.php	vdb-entry x_refsource_XF
http://www.redhat.com/support/errata/RHSA-2002-194.html	vendor-advisory x_refsource_REDHAT
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php	vendor-advisory x_refsource_MANDRAKE

Hyperlink: http://marc.info/?l=bugtraq&m=103497852330838&w=2

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://www.securityfocus.com/bid/5978

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://marc.info/?l=bugtraq&m=104005975415582&w=2

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537

Resource:

vendor-advisory

x_refsource_CONECTIVA

Hyperlink: http://www.kb.cert.org/vuls/id/169841

Resource:

third-party-advisory

x_refsource_CERT-VN

Hyperlink: http://www.debian.org/security/2002/dsa-207

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://www.securityfocus.com/advisories/4567

Resource:

vendor-advisory

x_refsource_HP

Hyperlink: http://www.redhat.com/support/errata/RHSA-2002-195.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.iss.net/security_center/static/10365.php

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://www.redhat.com/support/errata/RHSA-2002-194.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php

Resource:

vendor-advisory

x_refsource_MANDRAKE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://marc.info/?l=bugtraq&m=103497852330838&w=2	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.securityfocus.com/bid/5978	vdb-entry x_refsource_BID x_transferred
http://marc.info/?l=bugtraq&m=104005975415582&w=2	mailing-list x_refsource_BUGTRAQ x_transferred
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537	vendor-advisory x_refsource_CONECTIVA x_transferred
http://www.kb.cert.org/vuls/id/169841	third-party-advisory x_refsource_CERT-VN x_transferred
http://www.debian.org/security/2002/dsa-207	vendor-advisory x_refsource_DEBIAN x_transferred
http://www.securityfocus.com/advisories/4567	vendor-advisory x_refsource_HP x_transferred
http://www.redhat.com/support/errata/RHSA-2002-195.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.iss.net/security_center/static/10365.php	vdb-entry x_refsource_XF x_transferred
http://www.redhat.com/support/errata/RHSA-2002-194.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php	vendor-advisory x_refsource_MANDRAKE x_transferred

Hyperlink: http://marc.info/?l=bugtraq&m=103497852330838&w=2

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://www.securityfocus.com/bid/5978

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://marc.info/?l=bugtraq&m=104005975415582&w=2

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537

Resource:

vendor-advisory

x_refsource_CONECTIVA

x_transferred

Hyperlink: http://www.kb.cert.org/vuls/id/169841

Resource:

third-party-advisory

x_refsource_CERT-VN

x_transferred

Hyperlink: http://www.debian.org/security/2002/dsa-207

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://www.securityfocus.com/advisories/4567

Resource:

vendor-advisory

x_refsource_HP

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2002-195.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.iss.net/security_center/static/10365.php

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2002-194.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php

Resource:

vendor-advisory

x_refsource_MANDRAKE

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:28 Oct, 2002 | 05:00

Updated At:03 Apr, 2025 | 01:03

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 2.0

Base score: 7.5

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

HP Inc.

>>secure_os>>1.0

cpe:2.3:o:hp:secure_os:1.0:*:linux:*:*:*:*:*

Mandriva (Mandrakesoft)

>>mandrake_linux>>7.2

cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*

Mandriva (Mandrakesoft)

>>mandrake_linux>>8.0

cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*

Mandriva (Mandrakesoft)

>>mandrake_linux>>8.0

cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:ppc:*:*:*:*:*

Mandriva (Mandrakesoft)

>>mandrake_linux>>8.1

cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*

Mandriva (Mandrakesoft)

>>mandrake_linux>>8.1

cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:ia64:*:*:*:*:*

Mandriva (Mandrakesoft)

>>mandrake_linux>>8.2

cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*

Mandriva (Mandrakesoft)

>>mandrake_linux>>8.2

cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:ppc:*:*:*:*:*

Mandriva (Mandrakesoft)

>>mandrake_linux>>9.0

cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>linux>>6.2

cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*

Red Hat, Inc.

>>linux>>6.2

cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*

Red Hat, Inc.

>>linux>>6.2

cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*

Red Hat, Inc.

>>linux>>6.2

cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*

Red Hat, Inc.

>>linux>>7.0

cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>linux>>7.0

cpe:2.3:o:redhat:linux:7.0:*:alpha:*:*:*:*:*

Red Hat, Inc.

>>linux>>7.0

cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:*

Red Hat, Inc.

>>linux>>7.1

cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*

Red Hat, Inc.

>>linux>>7.1

cpe:2.3:o:redhat:linux:7.1:*:alpha:*:*:*:*:*

Red Hat, Inc.

>>linux>>7.1

cpe:2.3:o:redhat:linux:7.1:*:i386:*:*:*:*:*

Red Hat, Inc.

>>linux>>7.1

cpe:2.3:o:redhat:linux:7.1:*:ia64:*:*:*:*:*

Red Hat, Inc.

>>linux>>7.2

cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*

Red Hat, Inc.

>>linux>>7.2

cpe:2.3:o:redhat:linux:7.2:*:i386:*:*:*:*:*

Red Hat, Inc.

>>linux>>7.2

cpe:2.3:o:redhat:linux:7.2:*:ia64:*:*:*:*:*

Red Hat, Inc.

>>linux>>7.3

cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*

Red Hat, Inc.

>>linux>>7.3

cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*

Red Hat, Inc.

>>linux>>8.0

cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>linux>>8.0

cpe:2.3:o:redhat:linux:8.0:*:i386:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537	cve@mitre.org	N/A
http://marc.info/?l=bugtraq&m=103497852330838&w=2	cve@mitre.org	N/A
http://marc.info/?l=bugtraq&m=104005975415582&w=2	cve@mitre.org	N/A
http://www.debian.org/security/2002/dsa-207	cve@mitre.org	Patch Vendor Advisory
http://www.iss.net/security_center/static/10365.php	cve@mitre.org	Vendor Advisory
http://www.kb.cert.org/vuls/id/169841	cve@mitre.org	US Government Resource
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php	cve@mitre.org	N/A
http://www.redhat.com/support/errata/RHSA-2002-194.html	cve@mitre.org	Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2002-195.html	cve@mitre.org	N/A
http://www.securityfocus.com/advisories/4567	cve@mitre.org	N/A
http://www.securityfocus.com/bid/5978	cve@mitre.org	Patch Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537	af854a3a-2127-422b-91ae-364da2661108	N/A
http://marc.info/?l=bugtraq&m=103497852330838&w=2	af854a3a-2127-422b-91ae-364da2661108	N/A
http://marc.info/?l=bugtraq&m=104005975415582&w=2	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2002/dsa-207	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.iss.net/security_center/static/10365.php	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.kb.cert.org/vuls/id/169841	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2002-194.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2002-195.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/advisories/4567	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/5978	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory