CVE-2002-0366 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Windows NT

3 documents3 sources
Severity
7.2HIGHNVD
EPSS
0.5%
top 32.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Windows NT
Timeline
PublishedJul 3
Latest updateApr 30

Description

Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-2jp3-r2v3-cr4c: Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4↗2022-04-30
▶
CVEList
CVE-2002-0366: Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4↗2003-04-02
▶
CVE-2002-0366 — Microsoft Windows NT vulnerability | cvebase