Lucene search

MitreCVE-2002-0835

HistorySep 01, 2004 - 4:00 a.m.

CVE-2002-0835

2004-09-0104:00:00

mitre

web.nvd.nist.gov

cve-2002-0835

preboot execution environment

pxe server

denial of service

crash

dhcp

voip phones

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.6

Confidence

High

EPSS

0.038

Percentile

91.9%

JSON

Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones.

Affected configurations

Nvd

Node

calderaopenlinux_serverMatch3.1

calderaopenlinux_serverMatch3.1.1

calderaopenlinux_workstationMatch3.1

calderaopenlinux_workstationMatch3.1.1

redhatpre-execution_environmentMatch0.1

Node

hpsecure_osMatch1.0linux

VendorProductVersionCPE
calderaopenlinux_server3.1cpe:2.3:a:caldera:openlinux_server:3.1:*:*:*:*:*:*:*
calderaopenlinux_server3.1.1cpe:2.3:a:caldera:openlinux_server:3.1.1:*:*:*:*:*:*:*
calderaopenlinux_workstation3.1cpe:2.3:a:caldera:openlinux_workstation:3.1:*:*:*:*:*:*:*
calderaopenlinux_workstation3.1.1cpe:2.3:a:caldera:openlinux_workstation:3.1.1:*:*:*:*:*:*:*
redhatpre-execution_environment0.1cpe:2.3:a:redhat:pre-execution_environment:0.1:*:*:*:*:*:*:*
hpsecure_os1.0cpe:2.3:o:hp:secure_os:1.0:*:linux:*:*:*:*:*

Vendor	Product	Version	CPE
caldera	openlinux_server	3.1	cpe:2.3:a:caldera:openlinux_server:3.1:::::::*
caldera	openlinux_server	3.1.1	cpe:2.3:a:caldera:openlinux_server:3.1.1:::::::*
caldera	openlinux_workstation	3.1	cpe:2.3:a:caldera:openlinux_workstation:3.1:::::::*
caldera	openlinux_workstation	3.1.1	cpe:2.3:a:caldera:openlinux_workstation:3.1.1:::::::*
redhat	pre-execution_environment	0.1	cpe:2.3:a:redhat:pre-execution_environment:0.1:::::::*
hp	secure_os	1.0	cpe:2.3:o:hp:secure_os:1.0::linux:::::

References

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-044.0.txt

online.securityfocus.com/advisories/4449

www.iss.net/security_center/static/10003.php

www.redhat.com/support/errata/RHSA-2002-162.html

www.redhat.com/support/errata/RHSA-2002-165.html

www.securityfocus.com/bid/5596

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.6

Confidence

High

EPSS

0.038

Percentile

91.9%

JSON

Related for CVE-2002-0835