CVE-2002-0366

high

Description

Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A63

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A61

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-029

http://www.securityfocus.com/bid/4852

http://www.nextgenss.com/vna/ms-ras.txt

http://online.securityfocus.com/archive/1/278145

http://online.securityfocus.com/archive/1/276776

Details

Source: Mitre, NVD

Published: 2002-07-03

Updated: 2025-04-03

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H