Lucene search
HistoryApr 02, 2003 - 5:00 a.m.
CVE-2002-0423
cve-2002-0423
efingerd 1.5
buffer overflow
denial of service
arbitrary code execution
dns look up
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.3 High
AI Score
Confidence
High
0.037 Low
EPSS
Percentile
91.8%
Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a finger request from an IP address with a long hostname that is obtained via a reverse DNS lookup.
Affected configurations
Node
efingerdefingerdMatch1.3
ORefingerdefingerdMatch1.6.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| efingerd:efingerd | efingerd | eq | 1.3 |
| efingerd:efingerd | efingerd | eq | 1.6.1 |
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.3 High
AI Score
Confidence
High
0.037 Low
EPSS
Percentile
91.8%
Related for CVE-2002-0423