CVE-2002-0366: Buffer Overflow
First published: Wed Jul 03 2002(Updated: )
Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows NT | =4.0-sp5 | |
| Microsoft Windows NT | =4.0-sp3 | |
| Microsoft Windows NT | =4.0-sp6a | |
| Microsoft Windows XP | =gold | |
| Microsoft Windows 2000 | ||
| Microsoft Windows NT | =4.0-sp6 | |
| Microsoft Windows XP | ||
| Microsoft Windows NT | =4.0 | |
| Microsoft Windows NT | =4.0-sp1 | |
| Microsoft Windows NT | =4.0-sp3 | |
| Microsoft Windows NT | =4.0-sp6 | |
| Microsoft Windows NT | =4.0-sp4 | |
| Microsoft Windows NT | =4.0-sp5 | |
| Microsoft Windows 2000 | =sp2 | |
| Microsoft Windows NT | =4.0-sp6 | |
| Microsoft Windows NT | =4.0 | |
| Microsoft Windows NT | =4.0-sp4 | |
| Microsoft Windows NT | =4.0-sp2 | |
| Microsoft Windows NT | =4.0-sp6a | |
| Microsoft Windows NT | =4.0 | |
| Microsoft Windows NT | =4.0-sp6a | |
| Microsoft Windows NT | =4.0-sp4 | |
| Microsoft Windows NT | =4.0-sp2 | |
| Microsoft Windows NT | =4.0-sp1 | |
| Microsoft Windows 2000 | =sp1 | |
| Microsoft Windows NT | =4.0-sp4 | |
| Microsoft Windows NT | =4.0-sp6 | |
| Microsoft Windows XP | ||
| Microsoft Windows NT | =4.0-sp3 | |
| Microsoft Windows NT | =4.0-sp1 | |
| Microsoft Windows NT | =4.0-sp2 | |
| Microsoft Windows NT | =4.0-sp5 | |
| Microsoft Windows NT | =4.0-sp1 | |
| Microsoft Windows NT | =4.0 | |
| Microsoft Windows NT | =4.0-sp6a | |
| Microsoft Windows NT | =4.0-sp3 | |
| Microsoft Windows NT | =4.0-sp5 | |
| Microsoft Windows NT | =4.0-sp2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.nextgenss.com/vna/ms-ras.txt
- http://www.securityfocus.com/bid/4852
- http://online.securityfocus.com/archive/1/276776
- http://online.securityfocus.com/archive/1/278145
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A63
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A61
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-029
- collector/nvd-historical
- vendor/microsoft
- product/windows nt
- canonical/microsoft windows nt
- product/windows xp
- canonical/microsoft windows xp
- product/windows 2000
- canonical/microsoft windows 2000
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/references
- agent/author
- agent/tags
- agent/event
- agent/description
- agent/source
- version/microsoft windows nt/4.0-sp5
- version/microsoft windows nt/4.0-sp3
- version/microsoft windows nt/4.0-sp6a
- version/microsoft windows xp/gold
- version/microsoft windows nt/4.0-sp6
- version/microsoft windows nt/4.0
- version/microsoft windows nt/4.0-sp1
- version/microsoft windows nt/4.0-sp4
- version/microsoft windows 2000/sp2
- version/microsoft windows nt/4.0-sp2
- version/microsoft windows 2000/sp1