Description
Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to execute arbitrary code via (1) address_match() of mystring.c or (2) other functions in tolist.c.
References
- DSA-123 vendor-advisory
- 4176 vdb-entry
- ecartis-mystring-bo(8284) vdb-entry
- http://www.ecartis.org/
- 20020311 [VulnWatch] Ecartis/Listar multiple vulnerabilities mailing-list
- 20020310 Ecartis/Listar multiple vulnerabilities mailing-list