Lucene search

K
cve[email protected]CVE-2002-1500
HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-1500

2003-04-0205:00:00
web.nvd.nist.gov
20
cve-2002-1500
buffer overflow
netbsd
mrinfo
mtrace
pppd
nvd
security vulnerability

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Buffer overflow in (1) mrinfo, (2) mtrace, and (3) pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables, which produces file descriptors larger than FD_SETSIZE, which are not checked by FD_SET().

Affected configurations

NVD
Node
netbsdnetbsdMatch1.4
OR
netbsdnetbsdMatch1.4alpha
OR
netbsdnetbsdMatch1.4arm32
OR
netbsdnetbsdMatch1.4sparc
OR
netbsdnetbsdMatch1.4x86
OR
netbsdnetbsdMatch1.4.1
OR
netbsdnetbsdMatch1.4.1alpha
OR
netbsdnetbsdMatch1.4.1arm32
OR
netbsdnetbsdMatch1.4.1sh3
OR
netbsdnetbsdMatch1.4.1sparc
OR
netbsdnetbsdMatch1.4.1x86
OR
netbsdnetbsdMatch1.4.2
OR
netbsdnetbsdMatch1.4.2alpha
OR
netbsdnetbsdMatch1.4.2arm32
OR
netbsdnetbsdMatch1.4.2sparc
OR
netbsdnetbsdMatch1.4.2x86
OR
netbsdnetbsdMatch1.4.3
OR
netbsdnetbsdMatch1.5
OR
netbsdnetbsdMatch1.5sh3
OR
netbsdnetbsdMatch1.5x86
OR
netbsdnetbsdMatch1.5.1
OR
netbsdnetbsdMatch1.5.2
OR
netbsdnetbsdMatch1.5.3

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2002-1500