CVE-2002-1500: Buffer Overflow
First published: Tue Mar 18 2003(Updated: )
Buffer overflow in (1) mrinfo, (2) mtrace, and (3) pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables, which produces file descriptors larger than FD_SETSIZE, which are not checked by FD_SET().
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NetBSD NetBSD | =1.5.3 | |
| NetBSD NetBSD | =1.4 | |
| NetBSD NetBSD | =1.5 | |
| NetBSD NetBSD | =1.4.2 | |
| NetBSD NetBSD | =1.4.2 | |
| NetBSD NetBSD | =1.4.2 | |
| NetBSD NetBSD | =1.4.1 | |
| NetBSD NetBSD | =1.4.2 | |
| NetBSD NetBSD | =1.5 | |
| NetBSD NetBSD | =1.4.2 | |
| NetBSD NetBSD | =1.4.1 | |
| NetBSD NetBSD | =1.5.1 | |
| NetBSD NetBSD | =1.5 | |
| NetBSD NetBSD | =1.5.2 | |
| NetBSD NetBSD | =1.4.3 | |
| NetBSD NetBSD | =1.4 | |
| NetBSD NetBSD | =1.4 | |
| NetBSD NetBSD | =1.4.1 | |
| NetBSD NetBSD | =1.4.1 | |
| NetBSD NetBSD | =1.4.1 | |
| NetBSD NetBSD | =1.4 | |
| NetBSD NetBSD | =1.4.1 | |
| NetBSD NetBSD | =1.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/references
- agent/type
- agent/remedy
- agent/last-modified-date
- agent/first-publish-date
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/author
- agent/weakness
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/netbsd
- canonical/netbsd netbsd
- version/netbsd netbsd/1.5.3
- version/netbsd netbsd/1.4
- version/netbsd netbsd/1.5
- version/netbsd netbsd/1.4.2
- version/netbsd netbsd/1.4.1
- version/netbsd netbsd/1.5.1
- version/netbsd netbsd/1.5.2
- version/netbsd netbsd/1.4.3