CVE-2002-1565: Buffer Overflow

Published Jun 5, 2003

Updated

Buffer overflow in urlfilename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long URL.

Affected Software

2 affected componentsFixes available

debian/wget

1.20.1-1.11.21-1+deb11u11.21.3-11.21.4-1

Immunix Immunix=7

Remediation

Patch Available

http://www.debian.org/security/2002/dsa-209

Event History

Jun 5, 2003

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1565?

CVE-2002-1565 is considered a critical vulnerability due to its potential to cause denial of service and execute arbitrary code.

How do I fix CVE-2002-1565?

To fix CVE-2002-1565, you should upgrade to wget version 1.20.1-1.1 or later, or apply any available patches from your Linux distribution.

What software is affected by CVE-2002-1565?

CVE-2002-1565 affects versions of wget prior to 1.20.1 and may also impact specific Immunix distributions.

What impact does CVE-2002-1565 have on my system?

CVE-2002-1565 can lead to a segmentation fault and potentially allow attackers to execute arbitrary code, posing a significant risk to system integrity.

Is there a workaround for CVE-2002-1565?

Until a patch is applied, avoiding the use of wget or restricting the input of long URLs can serve as a temporary workaround for CVE-2002-1565.