CVE-2002-1500: Buffer Overflow
Buffer overflow in (1) mrinfo, (2) mtrace, and (3) pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables, which produces file descriptors larger than FDSETSIZE, which are not checked by FDSET().
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1500?
CVE-2002-1500 has a high severity rating due to the potential for local users to gain elevated privileges.
How do I fix CVE-2002-1500?
To fix CVE-2002-1500, update to a version of NetBSD that has addressed this buffer overflow vulnerability.
What versions of NetBSD are affected by CVE-2002-1500?
CVE-2002-1500 affects NetBSD versions 1.4.x to 1.6, including specific versions like 1.4, 1.4.1, 1.4.2, 1.5, and 1.5.3.
What is the nature of the vulnerability in CVE-2002-1500?
The vulnerability in CVE-2002-1500 is a buffer overflow that occurs when certain programs do not correctly check file descriptor limits.
Can CVE-2002-1500 be exploited remotely?
CVE-2002-1500 is a local vulnerability and can only be exploited by users with access to the affected system.