Lucene search

MitreCVE-2002-1265

HistorySep 01, 2004 - 4:00 a.m.

CVE-2002-1265

2004-09-0104:00:00

mitre

web.nvd.nist.gov

cve-2002-1265

sun rpc

libc

denial of service

hang

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.042

Percentile

92.4%

JSON

The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service (hang).

Affected configurations

Nvd

Node

gnuglibcMatch2.0

gnuglibcMatch2.0.1

gnuglibcMatch2.0.2

gnuglibcMatch2.0.3

gnuglibcMatch2.0.4

gnuglibcMatch2.0.5

gnuglibcMatch2.0.6

gnuglibcMatch2.1

gnuglibcMatch2.1.1

gnuglibcMatch2.1.1.6

gnuglibcMatch2.1.2

gnuglibcMatch2.1.3

gnuglibcMatch2.1.3.10

gnuglibcMatch2.2

gnuglibcMatch2.2.1

gnuglibcMatch2.2.2

gnuglibcMatch2.2.3

gnuglibcMatch2.2.4

gnuglibcMatch2.2.5

gnuglibcMatch2.3

sgiirixMatch2.3.1

sgiirixMatch6.5

sgiirixMatch6.5.1

sgiirixMatch6.5.2

sgiirixMatch6.5.3

sgiirixMatch6.5.4

sgiirixMatch6.5.5

sgiirixMatch6.5.6

sgiirixMatch6.5.7

sgiirixMatch6.5.8

sgiirixMatch6.5.9

sgiirixMatch6.5.10

sgiirixMatch6.5.11

sgiirixMatch6.5.12

sgiirixMatch6.5.13

sgiirixMatch6.5.14f

sgiirixMatch6.5.14m

sgiirixMatch6.5.15f

sgiirixMatch6.5.15m

sgiirixMatch6.5.16f

sgiirixMatch6.5.16m

sgiirixMatch6.5.17f

sgiirixMatch6.5.17m

Node

applemac_os_xMatch10.0

applemac_os_xMatch10.0.1

applemac_os_xMatch10.0.2

applemac_os_xMatch10.0.3

applemac_os_xMatch10.0.4

applemac_os_xMatch10.1

applemac_os_xMatch10.1.1

applemac_os_xMatch10.1.2

applemac_os_xMatch10.1.3

applemac_os_xMatch10.1.4

applemac_os_xMatch10.1.5

applemac_os_xMatch10.2

applemac_os_xMatch10.2.1

applemac_os_x_serverMatch10.0

applemac_os_x_serverMatch10.2

applemac_os_x_serverMatch10.2.1

VendorProductVersionCPE
gnuglibc2.0cpe:2.3:a:gnu:glibc:2.0:*:*:*:*:*:*:*
gnuglibc2.0.1cpe:2.3:a:gnu:glibc:2.0.1:*:*:*:*:*:*:*
gnuglibc2.0.2cpe:2.3:a:gnu:glibc:2.0.2:*:*:*:*:*:*:*
gnuglibc2.0.3cpe:2.3:a:gnu:glibc:2.0.3:*:*:*:*:*:*:*
gnuglibc2.0.4cpe:2.3:a:gnu:glibc:2.0.4:*:*:*:*:*:*:*
gnuglibc2.0.5cpe:2.3:a:gnu:glibc:2.0.5:*:*:*:*:*:*:*
gnuglibc2.0.6cpe:2.3:a:gnu:glibc:2.0.6:*:*:*:*:*:*:*
gnuglibc2.1cpe:2.3:a:gnu:glibc:2.1:*:*:*:*:*:*:*
gnuglibc2.1.1cpe:2.3:a:gnu:glibc:2.1.1:*:*:*:*:*:*:*
gnuglibc2.1.1.6cpe:2.3:a:gnu:glibc:2.1.1.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gnu	glibc	2.0	cpe:2.3:a:gnu:glibc:2.0:::::::*
gnu	glibc	2.0.1	cpe:2.3:a:gnu:glibc:2.0.1:::::::*
gnu	glibc	2.0.2	cpe:2.3:a:gnu:glibc:2.0.2:::::::*
gnu	glibc	2.0.3	cpe:2.3:a:gnu:glibc:2.0.3:::::::*
gnu	glibc	2.0.4	cpe:2.3:a:gnu:glibc:2.0.4:::::::*
gnu	glibc	2.0.5	cpe:2.3:a:gnu:glibc:2.0.5:::::::*
gnu	glibc	2.0.6	cpe:2.3:a:gnu:glibc:2.0.6:::::::*
gnu	glibc	2.1	cpe:2.3:a:gnu:glibc:2.1:::::::*
gnu	glibc	2.1.1	cpe:2.3:a:gnu:glibc:2.1.1:::::::*
gnu	glibc	2.1.1.6	cpe:2.3:a:gnu:glibc:2.1.1.6:::::::*

Rows per page:

1-10 of 591

References

ftp://patches.sgi.com/support/free/security/advisories/20021103-01-P

sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/51082

www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0800.1

www.info.apple.com/usen/security/security_updates.html

www.iss.net/security_center/static/10539.php

www.kb.cert.org/vuls/id/266817

www.securityfocus.com/bid/6103

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2248

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.042

Percentile

92.4%

JSON

Related for CVE-2002-1265