CVE-2002-0366
Summary
| CVE | CVE-2002-0366 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2002-07-03 04:00:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry. |
Risk And Classification
Primary CVSS: v2.0 7.2 from [email protected]
AV:L/AC:L/Au:N/C:C/I:C/A:C
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:L/AC:L/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Microsoft | Windows 2000 | All | All | All | All |
| Operating System | Microsoft | Windows 2000 | All | sp1 | All | All |
| Operating System | Microsoft | Windows 2000 | All | sp2 | All | All |
| Operating System | Microsoft | Windows Nt | 4.0 | All | enterprise_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | All | server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | All | terminal_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | All | workstation | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp1 | enterprise_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp1 | server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp1 | terminal_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp1 | workstation | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp2 | enterprise_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp2 | server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp2 | terminal_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp2 | workstation | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp3 | enterprise_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp3 | server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp3 | terminal_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp3 | workstation | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp4 | enterprise_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp4 | server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp4 | terminal_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp4 | workstation | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp5 | enterprise_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp5 | server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp5 | terminal_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp5 | workstation | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp6 | enterprise_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp6 | server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp6 | terminal_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp6 | workstation | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp6a | enterprise_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp6a | server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp6a | terminal_server | All |
| Operating System | Microsoft | Windows Nt | 4.0 | sp6a | workstation | All |
| Operating System | Microsoft | Windows Xp | All | All | 64-bit | All |
| Operating System | Microsoft | Windows Xp | All | All | home | All |
| Operating System | Microsoft | Windows Xp | All | gold | professional | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| Microsoft Windows 2000 Remote Access Service Buffer Overflow Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Patch, Vendor Advisory |
| SecurityFocus HOME Mailing List: BugTraq | af854a3a-2127-422b-91ae-364da2661108 | online.securityfocus.com | |
| Microsoft Security Bulletin MS02-029 - Critical | Microsoft Docs | af854a3a-2127-422b-91ae-364da2661108 | docs.microsoft.com | |
| SecurityFocus HOME Mailing List: BugTraq | af854a3a-2127-422b-91ae-364da2661108 | online.securityfocus.com | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| nextgenss.com - This website is for sale! - nextgenss Resources and Information. | af854a3a-2127-422b-91ae-364da2661108 | www.nextgenss.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.