CVE-2002-0587: Buffer Overflow

Published Jun 11, 2002

Updated

Buffer overflow in NsPdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to cause a denial of service or execute arbitrary code via the Error or Notice parameters.

Affected Software

9 affected components

AOL Aol Server=3.2

AOL Aol Server=3.1

AOL Aol Server=3.3

AOL Aol Server=3.0

AOL Aol Server=3.4

AOL Aol Server=3.2.1

AOL Aol Server=3.3.1

AOL Aol Server=3.4.2

AOL Aol Server=3.4.1

Remediation

Patch Available

http://archives.neohapsis.com/archives/bugtraq/2002-04/0195.html

Event History

Jun 11, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0587?

CVE-2002-0587 has a severity rating that indicates a significant risk of denial of service and potential remote code execution.

How do I fix CVE-2002-0587?

To fix CVE-2002-0587, update to AOL Server version 3.4.2 or later which addresses the buffer overflow issue.

Which versions of AOL Server are affected by CVE-2002-0587?

CVE-2002-0587 affects AOL Server versions 3.0 to 3.4.2 inclusive.

What are the potential impacts of CVE-2002-0587?

The impacts of CVE-2002-0587 include denial of service and the ability for remote attackers to execute arbitrary code.

Can CVE-2002-0587 be exploited remotely?

Yes, CVE-2002-0587 can be exploited remotely, allowing attackers to exploit the buffer overflow via specific parameters.