Lucene search

[email protected]CVE-2002-0600

HistoryJun 18, 2002 - 4:00 a.m.

CVE-2002-0600

2002-06-1804:00:00

[email protected]

web.nvd.nist.gov

cve-2002-0600

kth kerberos

ftp client

heap overflow

security vulnerability

remote code execution

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.7%

JSON

Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request.

Affected configurations

NVD

Node

kthkth_kerberosMatch4_1.0.2

kthkth_kerberosMatch4_1.0.3

kthkth_kerberosMatch4_1.0.4

kthkth_kerberosMatch4_1.1.1

luke_mewburnlukemftpMatch1.5

CPENameOperatorVersion
kth:kth_kerberoskth kth kerberoseq4_1.0.2
kth:kth_kerberoskth kth kerberoseq4_1.0.3
kth:kth_kerberoskth kth kerberoseq4_1.0.4
kth:kth_kerberoskth kth kerberoseq4_1.1.1
luke_mewburn:lukemftpluke mewburn lukemftpeq1.5

CPE	Name	Operator	Version
kth:kth_kerberos	kth kth kerberos	eq	4_1.0.2
kth:kth_kerberos	kth kth kerberos	eq	4_1.0.3
kth:kth_kerberos	kth kth kerberos	eq	4_1.0.4
kth:kth_kerberos	kth kth kerberos	eq	4_1.1.1
luke_mewburn:lukemftp	luke mewburn lukemftp	eq	1.5

References

archives.neohapsis.com/archives/bugtraq/2002-04/0339.html

www.iss.net/security_center/static/8938.php

www.securityfocus.com/bid/4592

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.7%

JSON

Related for CVE-2002-0600

cvelist1 nvd1