CVE-2002-0366

Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2002-07-03

Last modified

2024-08-08

Affected products

• Windows 2000 (Microsoft)
• Windows Nt (Microsoft)
• Windows Xp (Microsoft)

References

• http://online.securityfocus.com/archive/1/276776
• http://online.securityfocus.com/archive/1/278145
• http://www.nextgenss.com/vna/ms-ras.txt
• http://www.securityfocus.com/bid/4852
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-029
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A61
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A63