CVE-2002-1566 netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.
MediumCVSS 5.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netris | = 0.3 | No fix listed |
| netris | = 0.4 | No fix listed |
| netris | = 0.5 | No fix listed |
| debian/netris(Debian:12) | < 0.52-1 | 0.52-1 |
| debian/netris(Debian:14) | < 0.52-1 | 0.52-1 |
| debian/netris(Debian:14) | = 0.4-3 | No fix listed |
| debian/netris(Debian:14) | = 0.5-2 | No fix listed |
| debian/netris(Debian:14) | = 0.5-2.0.1 | No fix listed |
| debian/netris(Debian:14) | = 0.5-4woody1 | No fix listed |
References
- Debian Security Tracker CVE-2002-1566 vendor-advisory
- 20020909 netris-0.5. mailing-list
- 5680 exploit patch vdb-entry vendor-advisory
- netris-remote-bo(10081) vdb-entry