CVE-2002-1391 Buffer overflow in cnd-program for mgetty before 1.1.29 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Caller ID string with a long CallerName argument.
HighCVSS 7.5
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in cnd-program for mgetty before 1.1.29 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Caller ID string with a long CallerName argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gert doering mgetty | <= 1.1.29 | No fix listed |
| debian/mgetty(Debian:12) | < 1.1.30-1 | 1.1.30-1 |
| debian/mgetty(Debian:13) | < 1.1.30-1 | 1.1.30-1 |
| debian/mgetty(Debian:14) | < 1.1.30-1 | 1.1.30-1 |
References
- GLSA-200304-09 vendor-advisory
- search.alphanet.ch vendor-advisory
- RHSA-2003:008 vendor-advisory
- RHSA-2003:036 vendor-advisory
- 7303 vdb-entry
- mgetty-cndprogram-callername-bo(11072) vdb-entry
- Debian Security Tracker CVE-2002-1391 vendor-advisory