Summary
The remote host is missing an update to ncurses
announced via advisory DSA 113-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20113-1
Insight
Several buffer overflows were fixed in the 'ncurses' library in November 2000. Unfortunately, one was missed. This can lead to crashes when using ncurses applications in large windows.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2002-0062 to this issue.
This problem has been fixed for the stable release of Debian in version 5.0-6.0potato2. The testing and unstable releases contain ncurses 5.2, which is not affected by this problem.
There are no known exploits for this problem, but we recommend that all users upgrade ncurses immediately.
Severity
Classification
-
CVE CVE-2002-0062 -
CVSS Base Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities