Vulnerability Details CVE-2002-1364
Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 46.4%
CVSS Severity
CVSS v2 Score 7.2
References
- http://marc.info/?l=bugtraq&m=103858895600963&w=2
- http://www.debian.org/security/2003/dsa-254
- http://www.novell.com/linux/security/advisories/2002_043_traceroute_nanog_nkitb.html
- http://www.securityfocus.com/bid/6166
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10778
- http://marc.info/?l=bugtraq&m=103858895600963&w=2
- http://www.debian.org/security/2003/dsa-254
- http://www.novell.com/linux/security/advisories/2002_043_traceroute_nanog_nkitb.html
- http://www.securityfocus.com/bid/6166
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10778
Products affected by CVE-2002-1364
-
cpe:2.3:a:ehud_gavron:tracesroute:6.0
-
cpe:2.3:a:ehud_gavron:tracesroute:6.1.1