CVE-2002-1306: Buffer Overflow
First published: Thu Nov 21 2002(Updated: )
Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly remote attackers to execute arbitrary code via the "lisa" daemon, and (2) remote attackers to execute arbitrary code via a certain "lan://" URL.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| KDE KDE | =2.2.1 | |
| KDE KDE | =2.1.2 | |
| KDE KDE | =3.0.2 | |
| KDE KDE | =2.2 | |
| KDE KDE | =2.1 | |
| KDE KDE | =3.0.1 | |
| KDE KDE | =3.0 | |
| KDE KDE | =2.1.1 | |
| KDE KDE | =2.2.2 | |
| KDE KDE | =3.0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.kde.org/info/security/advisory-20021111-2.txt
- http://www.iss.net/security_center/static/10598.php
- http://www.novell.com/linux/security/advisories/2002_042_kdenetwork.html
- http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-080.php
- http://www.redhat.com/support/errata/RHSA-2002-220.html
- http://www.debian.org/security/2002/dsa-214
- http://www.ciac.org/ciac/bulletins/n-020.shtml
- http://www.iss.net/security_center/static/10597.php
- http://marc.info/?l=bugtraq&m=103728981029342&w=2
- http://marc.info/?l=bugtraq&m=103712329102632&w=2
Frequently Asked Questions
What is the severity of CVE-2002-1306?
CVE-2002-1306 has a high severity rating due to multiple buffer overflows that can lead to remote code execution.
How do I fix CVE-2002-1306?
To mitigate CVE-2002-1306, upgrade to KDE version 3.0.4 or later, which contains patches for this vulnerability.
Which versions of KDE are affected by CVE-2002-1306?
CVE-2002-1306 affects KDE versions 2.1 through 3.0.3, including specific early 2.x and 3.x versions.
Can CVE-2002-1306 be exploited remotely?
Yes, CVE-2002-1306 can be exploited remotely via the "lisa" daemon using a vulnerable "lan://" URL.
Who is affected by CVE-2002-1306?
Users of KDE versions 2.x for 2.1 and later, and 3.x prior to 3.0.4, are at risk due to this vulnerability.
- collector/nvd-historical
- vendor/kde
- product/kde
- canonical/kde kde
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/remedy
- agent/author
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- version/kde kde/2.2.1
- version/kde kde/2.1.2
- version/kde kde/3.0.2
- version/kde kde/2.2
- version/kde kde/2.1
- version/kde kde/3.0.1
- version/kde kde/3.0
- version/kde kde/2.1.1
- version/kde kde/2.2.2
- version/kde kde/3.0.3