CVE-2002-0062: Debian Linux

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines for moving the physical cursor and scrolling."

Affected products

• Debian Debian Linux: version 2.2 only
• Freebsd Freebsd: version 3.1 only; version 3.2 only; version 3.3 only; version 3.4 only; version 3.5 only; version 3.5.1 only; …
• Invisible-Island Ncurses: before 5.0 (fixed in 5.0)
• Red Hat Linux: version 6.1 only; version 7.0 only; version 7.1 only; version 7.2 only
• Suse Suse Linux: version 6.2 only; version 6.3 only; version 7.0 only

Published 2002-03-08. Last modified 2026-07-23.