CVE-2002-0836

Published: Oct 28, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.

Affected (27)

Products: Hp: Secure Os · Mandrakesoft: Mandrake Linux · Redhat: Linux

1 product

1 product

1 product

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Hp Secure Os	Version 1.0
Mandrakesoft Mandrake Linux	Version 7.2
Mandrakesoft Mandrake Linux	Version 8.0
Mandrakesoft Mandrake Linux	Version 8.0
Mandrakesoft Mandrake Linux	Version 8.1
Mandrakesoft Mandrake Linux	Version 8.1
Mandrakesoft Mandrake Linux	Version 8.2
Mandrakesoft Mandrake Linux	Version 8.2
Mandrakesoft Mandrake Linux	Version 9.0
Redhat Linux	Version 6.2
Redhat Linux	Version 6.2
Redhat Linux	Version 6.2
Redhat Linux	Version 6.2
Redhat Linux	Version 7.0
Redhat Linux	Version 7.0
Redhat Linux	Version 7.0
Redhat Linux	Version 7.1
Redhat Linux	Version 7.1
Redhat Linux	Version 7.1
Redhat Linux	Version 7.1
Redhat Linux	Version 7.2
Redhat Linux	Version 7.2
Redhat Linux	Version 7.2
Redhat Linux	Version 7.3
Redhat Linux	Version 7.3
Redhat Linux	Version 8.0
Redhat Linux	Version 8.0

References (22)

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=103497852330838&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104005975415582&w=2

Source: cve@mitre.org

http://www.debian.org/security/2002/dsa-207

Source: cve@mitre.org

PatchVendor Advisory

http://www.iss.net/security_center/static/10365.php

Source: cve@mitre.org

Vendor Advisory

http://www.kb.cert.org/vuls/id/169841

Source: cve@mitre.org

US Government Resource

http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2002-194.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2002-195.html

Source: cve@mitre.org

http://www.securityfocus.com/advisories/4567

Source: cve@mitre.org

http://www.securityfocus.com/bid/5978

Source: cve@mitre.org

PatchVendor Advisory

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=103497852330838&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=104005975415582&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2002/dsa-207

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.iss.net/security_center/static/10365.php

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.kb.cert.org/vuls/id/169841

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2002-194.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2002-195.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/advisories/4567

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/5978

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.