{"id":"CVE-2002-1306","aliases":["DEBIAN-CVE-2002-1306","DSA-214","EUVD-2002-1290","GHSA-rwmh-cwhr-v98h"],"status":"published","title":"Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow ...","description":"Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly remote attackers to execute arbitrary code via the \"lisa\" daemon, and (2) remote attackers to execute arbitrary code via a certain \"lan://\" URL.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.058,"percentile":0.93173,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2002-11-21T05:00:00Z","modified":"2026-06-16T21:59:05Z","fixes":[{"ecosystem":"Debian:3.0","package":"kdenetwork","fixed_in":["2.2.2-14.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:3.0","package":"kdenetwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-14.5"}]}]}],"products":[{"vendor":"kde","product":"kde"}],"references":[{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-080.php","tags":["vendor-advisory","x_refsource_MANDRAKE","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=103728981029342\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=103712329102632\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.kde.org/info/security/advisory-20021111-2.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10597.php","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.ciac.org/ciac/bulletins/n-020.shtml","tags":["third-party-advisory","government-resource","x_refsource_CIAC","x_transferred"]},{"url":"http://www.iss.net/security_center/static/10598.php","tags":["vdb-entry","x_refsource_XF","x_transferred","Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-214","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.novell.com/linux/security/advisories/2002_042_kdenetwork.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1306"},{"url":"https://github.com/advisories/GHSA-rwmh-cwhr-v98h"}],"sources":{"cve":[{"id":"CVE-2002-1306","description":"Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly remote attackers to execute arbitrary code via the \"lisa\" daemon, and (2) remote attackers to execute arbitrary code via a certain \"lan://\" URL.","status":"published","published":"2002-11-21T05:00:00Z","modified":"2024-08-08T03:19:28.473Z","updated_at":"2026-11-02T14:33:54.972584Z"}],"euvd":[{"id":"EUVD-2002-1290","description":"Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly remote attackers to execute arbitrary code via the \"lisa\" daemon, and (2) remote attackers to execute arbitrary code via a certain \"lan://\" URL.","status":"published","published":"2002-11-21T05:00:00Z","modified":"2024-08-08T03:19:28Z","updated_at":"2026-11-03T01:14:56.771794Z"}],"ghsa":[{"id":"GHSA-rwmh-cwhr-v98h","title":"Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow ...","description":"Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly remote attackers to execute arbitrary code via the \"lisa\" daemon, and (2) remote attackers to execute arbitrary code via a certain \"lan://\" URL.","status":"published","published":"2022-04-30T18:20:55Z","modified":"2023-01-30T05:06:07Z","updated_at":"2026-11-02T14:47:25.8676Z"}],"nvd":[{"id":"CVE-2002-1306","description":"Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly remote attackers to execute arbitrary code via the \"lisa\" daemon, and (2) remote attackers to execute arbitrary code via a certain \"lan://\" URL.","status":"published","published":"2002-11-29T05:00:00Z","modified":"2026-06-16T21:59:05.047Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:43.239725Z"}],"osv":[{"id":"DSA-214","title":"kdenetwork - buffer overflows","status":"published","published":"2002-12-20T00:00:00Z","modified":"2026-03-09T01:22:36.157689Z","updated_at":"2026-11-02T15:46:15.108335Z"}]}}