CVE-2002-1158: Canna

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user.

Affected products

• Canna Canna: up to and including 3.5b2

Published 2002-12-18. Last modified 2026-06-16.