CVE

CVE-2002-1158

Date: (C)2002-12-18   (M)2023-12-22

Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.2
Exploit Score: 3.9
Impact Score: 10.0
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Reference:

http://marc.info/?l=bugtraq&m=104041812206344&w=2

BID-6351

DSA-224

RHSA-2002:246

RHSA-2002:261

RHSA-2003:115

canna-irwthrough-bo(10831)

http://canna.sourceforge.jp/sec/Canna-2002-01.txt