CVE-2002-0366

🗓️ 02 Apr 2003 05:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 72 Views

Buffer overflow in RAS phonebook for Windows NT 4.0, 2000, XP, enables code execution

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2002-0366	2 Apr 200305:00	–	cvelist
EUVD	EUVD-2002-0363	7 Oct 202500:30	–	euvd
NVD	CVE-2002-0366	3 Jul 200204:00	–	nvd
Tenable Nessus	MS02-029: Windows RAS Local Overflow (318138)	13 Jun 200200:00	–	nessus
CERT	Microsoft Remote Access Service API contains additional buffer overflow vulnerability via phonebook entries	13 Jun 200200:00	–	cert

NVD

Node

microsoft windows_2000

OR

microsoft windows_2000sp1

OR

microsoft windows_2000sp2

OR

microsoft windows_ntMatch4.0enterprise_server

OR

microsoft windows_ntMatch4.0server

OR

microsoft windows_ntMatch4.0terminal_server

OR

microsoft windows_ntMatch4.0workstation

OR

microsoft windows_ntMatch4.0sp1enterprise_server

OR

microsoft windows_ntMatch4.0sp1server

OR

microsoft windows_ntMatch4.0sp1terminal_server

OR

microsoft windows_ntMatch4.0sp1workstation

OR

microsoft windows_ntMatch4.0sp2enterprise_server

OR

microsoft windows_ntMatch4.0sp2server

OR

microsoft windows_ntMatch4.0sp2terminal_server

OR

microsoft windows_ntMatch4.0sp2workstation

OR

microsoft windows_ntMatch4.0sp3enterprise_server

OR

microsoft windows_ntMatch4.0sp3server

OR

microsoft windows_ntMatch4.0sp3terminal_server

OR

microsoft windows_ntMatch4.0sp3workstation

OR

microsoft windows_ntMatch4.0sp4enterprise_server

OR

microsoft windows_ntMatch4.0sp4server

OR

microsoft windows_ntMatch4.0sp4terminal_server

OR

microsoft windows_ntMatch4.0sp4workstation

OR

microsoft windows_ntMatch4.0sp5enterprise_server

OR

microsoft windows_ntMatch4.0sp5server

OR

microsoft windows_ntMatch4.0sp5terminal_server

OR

microsoft windows_ntMatch4.0sp5workstation

OR

microsoft windows_ntMatch4.0sp6enterprise_server

OR

microsoft windows_ntMatch4.0sp6server

OR

microsoft windows_ntMatch4.0sp6terminal_server

OR

microsoft windows_ntMatch4.0sp6workstation

OR

microsoft windows_ntMatch4.0sp6aenterprise_server

OR

microsoft windows_ntMatch4.0sp6aserver

OR

microsoft windows_ntMatch4.0sp6aterminal_server

OR

microsoft windows_ntMatch4.0sp6aworkstation

OR

microsoft windows_xp64-bit

OR

microsoft windows_xphome

OR

microsoft windows_xpgoldprofessional

Source	Link
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A61
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A63
nextgenss	www.nextgenss.com/vna/ms-ras.txt
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-029
online	www.online.securityfocus.com/archive/1/276776
online	www.online.securityfocus.com/archive/1/278145
securityfocus	www.securityfocus.com/bid/4852

16 Apr 2026 00:27Current

7.6High risk

Vulners AI Score7.6

CVSS 27.2

EPSS0.00538

cve-2002-0366 buffer overflow ras phonebook windows nt 4.0 windows 2000 windows xp code execution