CVE-2002-2317

CWE-200 — Information Exposure3 documents3 sources
Severity
7.8HIGH
EPSS
1.3%
top 20.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Symantec Velociraptor
Timeline
PublishedDec 31
Latest updateApr 30

Description

Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service (memory consumption) via an unknown method.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages1 packages

Patches

Patch: www.securityfocus.com ↗Patch: www.symantec.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-5frf-xwh8-76f9: Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1↗2022-04-30
▶
CVEList
CVE-2002-2317: Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1↗2007-10-26
▶
CVE-2002-2317 (HIGH CVSS 7.8) | Memory leak in the (1) httpd | cvebase.io