CVE-2002-2368: Buffer Overflow
Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to (1) the GetString function in proxy.c for the SOCKS5 module or (2) the HandleS4Connection function in proxy.c for the SOCKS4 module.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-2368?
CVE-2002-2368 has a high severity rating due to its potential to allow remote code execution and denial of service.
How do I fix CVE-2002-2368?
To fix CVE-2002-2368, upgrade to a version of NEC SOCKS5 later than 1.0r11 that does not contain the buffer overflow vulnerabilities.
What types of attacks does CVE-2002-2368 enable?
CVE-2002-2368 enables remote attackers to execute arbitrary code and cause denial of service via buffer overflow attacks.
What software is affected by CVE-2002-2368?
CVE-2002-2368 affects NEC SOCKS5 version 1.0 r11 and earlier.
What are the specific functions impacted by CVE-2002-2368?
CVE-2002-2368 impacts the GetString function in proxy.c for the SOCKS5 module and HandleS4Connection function for the SOCKS4 module.