Lucene search

[email protected]CVE-2002-0600

HistoryJun 18, 2002 - 4:00 a.m.

CVE-2002-0600

2002-06-1804:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2002-0600

kth kerberos

ftp client

heap overflow

security vulnerability

remote code execution

nvd

8.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.9%

JSON

Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request.

CPENameOperatorVersion
kth:kth_kerberoskth kth kerberoseq4_1.0.3
kth:kth_kerberoskth kth kerberoseq4_1.0.2
luke_mewburn:lukemftpluke mewburn lukemftpeq1.5
kth:kth_kerberoskth kth kerberoseq4_1.1.1
kth:kth_kerberoskth kth kerberoseq4_1.0.4

CPE	Name	Operator	Version
kth:kth_kerberos	kth kth kerberos	eq	4_1.0.3
kth:kth_kerberos	kth kth kerberos	eq	4_1.0.2
luke_mewburn:lukemftp	luke mewburn lukemftp	eq	1.5
kth:kth_kerberos	kth kth kerberos	eq	4_1.1.1
kth:kth_kerberos	kth kth kerberos	eq	4_1.0.4

References

archives.neohapsis.com/archives/bugtraq/2002-04/0339.html

www.iss.net/security_center/static/8938.php

www.securityfocus.com/bid/4592

8.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.9%

JSON