CVE-2002-0366

Windows NT and 2000 - Local Buffer Overflow in RAS Phonebook

Title source: llm

Description

Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.

References (7)

Core 7

Core References

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A63

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://online.securityfocus.com/archive/1/276776

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A61

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://online.securityfocus.com/archive/1/278145

Vendor Advisory x_refsource_misc

http://www.nextgenss.com/vna/ms-ras.txt

Patch, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/4852

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-029

Scores

EPSS 0.0283

EPSS Percentile 85.2%

Details

Status published

Products (3)

microsoft/windows_2000 (3 CPE variants)

microsoft/windows_nt 4.0 (32 CPE variants)

microsoft/windows_xp (3 CPE variants)

Published Jul 03, 2002

Tracked Since Feb 18, 2026