CVEvulnerability
CVE-2002-0366
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-07-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.
Affected configurations
• microsoft windows 2000
• microsoft windows nt 4.0
• microsoft windows xp
References
- http://online.securityfocus.com/archive/1/276776 online.securityfocus.com
- http://online.securityfocus.com/archive/1/278145 online.securityfocus.com
- http://www.nextgenss.com/vna/ms-ras.txt Vendor Advisory
- http://www.securityfocus.com/bid/4852 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-029 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A61 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A63 oval.cisecurity.org
- http://online.securityfocus.com/archive/1/276776 online.securityfocus.com
- http://online.securityfocus.com/archive/1/278145 online.securityfocus.com
- http://www.nextgenss.com/vna/ms-ras.txt Vendor Advisory
- http://www.securityfocus.com/bid/4852 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-029 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A61 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A63 oval.cisecurity.org