CVE-2002-2099 in Data Display Debugger

Riassunto

di MITRE

Buffer overflow in the GNU DataDisplay Debugger (DDD) 3.3.1 allows local users to execute arbitrary code and possibly gain privileges via a long HOME environment variable. NOTE: since DDD is not installed setuid or setgid, perhaps this issue should not be included in CVE.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 05/08/2005
• Divulgazione: 31/12/2002
• Moderazione: accettato
• Voce: VDB-19741
• CPE: pronto
• CWE: CWE-119 (confermato)
• CVSS: 9.3 (VulDB)
• EPSS: 0.00582
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-2099
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-2099
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-2099/