CVE-2002-1247

Published: Nov 29, 2002Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon.

Affected (12)

Products: Kde: Klisa, Kde · Lisa: Lisa

2 products

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Kde Klisa	Version 2.2.2
Lisa Lisa	Version 0.1.2
Lisa Lisa	Version 0.1

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Kde Kde	Version 2.0
Kde Kde	Version 2.1
Kde Kde	Version 2.2
Kde Kde	Version 3.0.1
Kde Kde	Version 3.0.2
Kde Kde	Version 3.0.3
Kde Kde	Version 3.0.3a
Kde Kde	Version 3.0.4
Kde Kde	Version 3.0

References (22)

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0068.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=103704823501757&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=103712329102632&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=103728981029342&w=2

Source: cve@mitre.org

http://www.ciac.org/ciac/bulletins/n-020.shtml

Source: cve@mitre.org

http://www.debian.org/security/2002/dsa-193

Source: cve@mitre.org

PatchVendor Advisory

http://www.idefense.com/advisory/11.11.02.txt

Source: cve@mitre.org

http://www.iss.net/security_center/static/10592.php

Source: cve@mitre.org

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2002:080

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2002-220.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/6157

Source: cve@mitre.org

PatchVendor Advisory

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0068.html