CVE-2002-0366

EPSS 2.83%
Veröffentlicht 03.07.2002 04:00:00
Zuletzt bearbeitet 16.06.2026 21:57:17
Erkennungen
Login

Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

NVD 38 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows 2000

Microsoft ≫ Windows 2000 Update sp1

Microsoft ≫ Windows 2000 Update sp2

Microsoft ≫ Windows Nt Version 4.0 Edition enterprise_server

Microsoft ≫ Windows Nt Version 4.0 Edition server

Microsoft ≫ Windows Nt Version 4.0 Edition terminal_server

Microsoft ≫ Windows Nt Version 4.0 Edition workstation

Microsoft ≫ Windows Nt Version 4.0 Update sp1 Edition enterprise_server

Microsoft ≫ Windows Nt Version 4.0 Update sp1 Edition server

Microsoft ≫ Windows Nt Version 4.0 Update sp1 Edition terminal_server

Microsoft ≫ Windows Nt Version 4.0 Update sp1 Edition workstation

Microsoft ≫ Windows Nt Version 4.0 Update sp2 Edition enterprise_server

Microsoft ≫ Windows Nt Version 4.0 Update sp2 Edition server

Microsoft ≫ Windows Nt Version 4.0 Update sp2 Edition terminal_server

Microsoft ≫ Windows Nt Version 4.0 Update sp2 Edition workstation

Microsoft ≫ Windows Nt Version 4.0 Update sp3 Edition enterprise_server

Microsoft ≫ Windows Nt Version 4.0 Update sp3 Edition server

Microsoft ≫ Windows Nt Version 4.0 Update sp3 Edition terminal_server

Microsoft ≫ Windows Nt Version 4.0 Update sp3 Edition workstation

Microsoft ≫ Windows Nt Version 4.0 Update sp4 Edition enterprise_server

Microsoft ≫ Windows Nt Version 4.0 Update sp4 Edition server

Microsoft ≫ Windows Nt Version 4.0 Update sp4 Edition terminal_server

Microsoft ≫ Windows Nt Version 4.0 Update sp4 Edition workstation

Microsoft ≫ Windows Nt Version 4.0 Update sp5 Edition enterprise_server

Microsoft ≫ Windows Nt Version 4.0 Update sp5 Edition server

Microsoft ≫ Windows Nt Version 4.0 Update sp5 Edition terminal_server

Microsoft ≫ Windows Nt Version 4.0 Update sp5 Edition workstation

Microsoft ≫ Windows Nt Version 4.0 Update sp6 Edition enterprise_server

Microsoft ≫ Windows Nt Version 4.0 Update sp6 Edition server

Microsoft ≫ Windows Nt Version 4.0 Update sp6 Edition terminal_server

Microsoft ≫ Windows Nt Version 4.0 Update sp6 Edition workstation

Microsoft ≫ Windows Nt Version 4.0 Update sp6a Edition enterprise_server

Microsoft ≫ Windows Nt Version 4.0 Update sp6a Edition server

Microsoft ≫ Windows Nt Version 4.0 Update sp6a Edition terminal_server

Microsoft ≫ Windows Nt Version 4.0 Update sp6a Edition workstation

Microsoft ≫ Windows Xp Edition 64-bit

Microsoft ≫ Windows Xp Edition home

Microsoft ≫ Windows Xp Update gold Edition professional

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.83%	0.85

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://online.securityfocus.com/archive/1/276776

http://online.securityfocus.com/archive/1/278145

http://www.nextgenss.com/vna/ms-ras.txt

Vendor Advisory

http://www.securityfocus.com/bid/4852

Patch

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-029

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A61

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A63

https://nvd.nist.gov/vuln/detail/CVE-2002-0366

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-0366

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-0366

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2002-0366