PT-2002-2286 · Nanog · Traceroute-Nanog

Publicado 2002-12-23 · Atualizado 2017-10-10 · CVE-2002-1364

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions traceroute-nanog (affected versions not specified)

Description The issue is related to a buffer overflow in the get origin function, which can be triggered by long WHOIS responses, potentially allowing attackers to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2002-1364

DSA-254

Produtos afetados

Traceroute-Nanog

Referências · 7

• 🔥 https://exploit-db.com/exploits/22014 · Exploit
• 🔥 http://securityfocus.com/bid/6166 · Exploit
• http://marc.info/?l=bugtraq&m=103858895600963&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10778 · Nota
• http://novell.com/linux/security/advisories/2002_043_traceroute_nanog_nkitb.html · Aviso do Fabricante
• http://debian.org/security/2003/dsa-254 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1364 · Nota de Segurança