Vulnerability Name:

CVE-2002-0003 (CCN-7881)

Assigned:2002-01-07
Published:2002-01-07
Updated:2017-10-10
Summary:Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system.
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Access
References:Source: CCN
Type: SCO Security Advisory CSSA-2002-057.0
Linux: groff pic buffer overflow

Source: MITRE
Type: CNA
CVE-2002-0003

Source: HP
Type: UNKNOWN
HPSBTL0201-014

Source: CCN
Type: RHSA-2002-004
New groff packages available to fix security problems

Source: CCN
Type: CIAC Information Bulletin M-059
Red Hat "groff" Vulnerability

Source: MANDRAKE
Type: UNKNOWN
MDKSA-2002:012

Source: CCN
Type: Gentoo Linux Security Announcement 2002-10-19 19:30 UTC
buffer overflow

Source: CCN
Type: OSVDB ID: 2024
GNU groff Pre-Processor LPRng Printing System Overflow

Source: REDHAT
Type: Patch, Vendor Advisory
RHSA-2002:004

Source: BID
Type: UNKNOWN
3869

Source: CCN
Type: BID-3869
Groff Pre-Processor Buffer Overflow Vulnerability

Source: XF
Type: UNKNOWN
linux-groff-preprocessor-bo(7881)

Source: XF
Type: UNKNOWN
linux-groff-preprocessor-bo(7881)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:gnu:groff:*:*:*:*:*:*:*:* (Version <= 1.16)

  • Configuration CCN 1:
  • cpe:/a:gnu:groff:*:*:*:*:*:*:*:*
  • AND
  • cpe:/o:redhat:linux:7:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:linux:7.1:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*
  • OR cpe:/a:mandrakesoft:mandrake_single_network_firewall:7.2:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:linux:7.2:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:linux:7.3:*:*:*:*:*:*:*
  • OR cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:8.0:*:ppc:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:8.1:*:ia64:*:*:*:*:*

  • * Denotes that component is vulnerable
    BACK
    gnu groff *
    gnu groff *
    redhat linux 7
    mandrakesoft mandrake linux 7.2
    redhat linux 7.1
    mandrakesoft mandrake linux 8.0
    mandrakesoft mandrake single network firewall 7.2
    mandrakesoft mandrake linux 8.1
    redhat linux 7.2
    redhat linux 7.3
    gentoo linux *
    mandrakesoft mandrake linux 8.0
    mandrakesoft mandrake linux 8.1