CVE
- Id
- 4596
- CVE No.
- CVE-2002-0204
- Status
- Candidate
- Description
- Buffer overflow in GNU Chess (gnuchess) 5.02 and earlier, if modified or used in a networked capacity contrary to its own design as a single-user application, may allow local or remote attackers to execute arbitrary code via a long command.
- Phase
- Proposed (20020502)
- Votes
- NOOP(2) Cole, Foat | REJECT(1) Wall | REVIEWING(1) Green
- Comments
- Green> The issue of modifying code and/or using code for purposes other than intended raises the hypothetical (albeit ridiculous) prospect of having to classify vulnerabilities within gcc, since one could develop malicious code using the compiler.