CVE-2002-0836: High severity redhat Linux vulnerability
Published Oct 28, 2002
·Updated
dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.
Affected Software
27 affected components
redhat Linux=7.2
Mandrakesoft Mandrake Linux=7.2
Mandrakesoft Mandrake Linux=8.2
redhat Linux=7.0
redhat Linux=6.2
redhat Linux=7.2
Mandrakesoft Mandrake Linux=8.1
redhat Linux=6.2
redhat Linux=8.0
redhat Linux=7.1
redhat Linux=7.3
HP Secure OS=1.0
Mandrakesoft Mandrake Linux=9.0
redhat Linux=7.0
Mandrakesoft Mandrake Linux=8.1
Mandrakesoft Mandrake Linux=8.2
redhat Linux=6.2
Mandrakesoft Mandrake Linux=8.0
redhat Linux=7.1
redhat Linux=7.1
redhat Linux=8.0
redhat Linux=7.3
redhat Linux=6.2
Mandrakesoft Mandrake Linux=8.0
redhat Linux=7.0
redhat Linux=7.2
redhat Linux=7.1
Remediation
Patch Available
Patch Available
Patch Available
Event History
Oct 28, 2002
CVE Published
05:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0836?
CVE-2002-0836 is considered to be of moderate severity due to the potential for remote command execution.
2
How do I fix CVE-2002-0836?
To fix CVE-2002-0836, upgrade the dvips converter in the tetex package to a version that addresses this vulnerability.
3
Which software is affected by CVE-2002-0836?
CVE-2002-0836 affects various versions of Red Hat Linux and Mandrake Linux, specifically those from 6.2 to 9.0.
4
Can CVE-2002-0836 be exploited remotely?
Yes, CVE-2002-0836 can be exploited remotely by attackers sending crafted print jobs.
5
What implications does CVE-2002-0836 have for system security?
CVE-2002-0836 could allow attackers to execute arbitrary commands on affected systems, posing a significant security risk.