Approved changes feed: RSS · Atom

cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-01-21:*:*:*:*:*:*:*

part: a version: 1.0.0_snapshot_2002-01-21 update: *

VendorEcartis (840dc9b3-bcf0-5168-b365-c893e532eae4)
ProductEcartis (2200271f-6392-523b-85ea-5ecfdbad4b03)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-0913 vulnerable 2026-06-08 04:47:51.885976 Details available
Unknown vulnerability in ecartis 0.x before 0.129a+1.0.0-snap20020514-1.3 and 1.x before 1.0.0+cvs.20030911-8 allows attackers in the same domain to gain administrator privileges and modify configuration.
Published: 2005-03-09T05:00:00.000Z
Updated: 2024-08-08T00:31:48.315Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0469 vulnerable 2026-06-08 04:46:21.507436 Details available
Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, "lock-to-user" is not set, and ecartis is called by certain MTA's, which could allow local users to gain privileges.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T02:49:28.485Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0468 vulnerable 2026-06-08 04:46:21.505701 Details available
Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad uses of sprintf() in (2) moderate.c, (3) lcgi.c, (4) fileapi.c, (5) cookie.c, (6) codes.c, or other files.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T02:49:29.053Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0467 vulnerable 2026-06-08 04:46:21.501183 Details available
Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to execute arbitrary code via (1) address_match() of mystring.c or (2) other functions in tolist.c.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T02:49:28.462Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.