CVE-2002-1814: Buffer Overflow
Buffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute arbitrary code via long command line arguments.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Remove the setuid bit from the efstools executable to prevent local privilege escalation (e.g., run: chmod u-s /path/to/efstools)
efstools (Bonobo) setuid bit = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1814?
CVE-2002-1814 is considered a high severity vulnerability due to the potential for local users to execute arbitrary code.
How do I fix CVE-2002-1814?
To fix CVE-2002-1814, remove the setuid permission from the efstools executable or update to a patched version of GNOME Bonobo.
Who is affected by CVE-2002-1814?
CVE-2002-1814 affects various versions of GNOME Bonobo and multiple Linux distributions, including Red Hat and Mandrake.
What types of attacks are possible with CVE-2002-1814?
CVE-2002-1814 allows local attackers to exploit a buffer overflow vulnerability to run arbitrary commands with elevated privileges.
When was CVE-2002-1814 disclosed?
CVE-2002-1814 was disclosed in 2002 and is part of a historical context of vulnerabilities impacting local user security.