CVE-2002-0984
The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC...
CVE-2002-0984 is a high vulnerability (CVSS 7.5) in Light, published August 22, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.74%, the 90th percentile. Fixed in epic4-script-light 2.7.30p5-1.1.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 3.74%EPSS, 90th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.7.30p5-1.1epic4-script-light
Description
The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
epic4-script-lightDebian:3.0 | before 2.7.30p5-1.1 | 2.7.30p5-1.1 |
What each source reports
NVD Score used
The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code.
- Record
CVE-2002-0984- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code.
- Record
CVE-2002-0984- Updated
- 2026-11-02
EUVDEUVD-2002-0973No score
The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code.
- Record
EUVD-2002-0973- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jhj6-m7gv-vv45No score
The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC...
The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code.
- Record
GHSA-jhj6-m7gv-vv45- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.