CVE-2002-1957: Pen

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

Buffer overflow in the netlog function in pen.c for Pen 0.9.1 and 0.9.2 allows remote attackers to execute arbitrary commands via malformed log messages.

Affected products

• Pen Pen: version 0.9.1 only; version 0.9.2 only

Published 2002-12-31. Last modified 2026-06-16.