CVE-2002-1155
published 2003-06-16CVE-2002-1155: Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument.
PriorityP424high7.2CVSS 2.0
AVLACLAuNCCICAC
EXPLOIT
EPSS
1.06%
60.8th percentile
Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | linux | — | — |
| redhat | linux | — | — |
| redhat | linux | — | — |
| redhat | linux | — | — |
| redhat | linux | — | — |
CVSS provenance
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat7.2HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2003-06-09·CVSS 7.2
CVE-2002-1155 [HIGH] security flaw
security flaw
Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument.
GHSA
GHSA-x5xg-q4w6-jc56: Buffer overflow in KON kon2 0
ghsa_unreviewed·2022-04-30
CVE-2002-1155 [HIGH] GHSA-x5xg-q4w6-jc56: Buffer overflow in KON kon2 0
Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument.
No detection rules found.
Exploit-DB
kon2 - Local Buffer Overflow (1)
exploitdb·2003-06-03
CVE-2002-1155 kon2 - Local Buffer Overflow (1)
kon2 - Local Buffer Overflow (1)
---
source: https://www.securityfocus.com/bid/7790/info
A buffer overflow vulnerability has been reported for the kon2 utility shipped with various Linux distributions. Exploitation of this vulnerability may result in a local attacker obtaining elevated privileges on a vulnerable system.
The vulnerability exists due to insufficient bounds checking performed on some commandline options passed to the vulnerable utility.
#!/usr/bin/perl
####################################################################################
#Priv8security.com kon2 version 0.3.9b-16 and video type 'VGA' selected
# KON> hardware scroll mode.
# sh-2.05b# id
# uid=0(root) gid=0(root) groups=500(wsxz)
################################################################################
Exploit-DB
kon2 - Local Buffer Overflow (2)
exploitdb·2003-06-03
CVE-2002-1155 kon2 - Local Buffer Overflow (2)
kon2 - Local Buffer Overflow (2)
---
// source: https://www.securityfocus.com/bid/7790/info
A buffer overflow vulnerability has been reported for the kon2 utility shipped with various Linux distributions. Exploitation of this vulnerability may result in a local attacker obtaining elevated privileges on a vulnerable system.
The vulnerability exists due to insufficient bounds checking performed on some commandline options passed to the vulnerable utility.
/*
* Buffer overflow in /usr/bin/kon v0.3.9b for RedHat 9.0
*
* http://www.mail-archive.com/[email protected]/msg11681.html
*
* The original bug was found by wszx for RedHat 8.0 - Ported to C
*
* Compile: gcc -Wall kon2root kon2root.c
*
*/
#include
#include
#include
#define NOP 0x90
#define RET 0xbffffffa
#define VULN "/usr
http://marc.info/?l=bugtraq&m=105474080512376&w=2http://marc.info/?l=bugtraq&m=105577912106710&w=2http://www.mandriva.com/security/advisories?name=MDKSA-2003:064http://www.redhat.com/support/errata/RHSA-2003-047.htmlhttp://www.redhat.com/support/errata/RHSA-2003-050.htmlhttp://marc.info/?l=bugtraq&m=105474080512376&w=2http://marc.info/?l=bugtraq&m=105577912106710&w=2http://www.mandriva.com/security/advisories?name=MDKSA-2003:064http://www.redhat.com/support/errata/RHSA-2003-047.htmlhttp://www.redhat.com/support/errata/RHSA-2003-050.html
2003-06-16
Published