Executive Summary
| Informations | |||
|---|---|---|---|
| Name | MS02-029 | First vendor Publication | N/A |
| Vendor | Microsoft | Last vendor Modification | N/A |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 7.2 | Attack Range | Local |
| Cvss Impact Score | 10 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Unchecked Buffer in Remote Access Service Phonebook Could Lead to Code Execution (Q318138) |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:61 | |||
| Oval ID: | oval:org.mitre.oval:def:61 | ||
| Title: | Windows NT Remote Access Service Phonebook Buffer Overflow | ||
| Description: | Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2002-0366 | Version: | 1 |
| Platform(s): | Microsoft Windows NT | Product(s): | Remote Access Service (RAS) |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:63 | |||
| Oval ID: | oval:org.mitre.oval:def:63 | ||
| Title: | Windows 2000 Remote Access Service Phonebook Buffer Overflow | ||
| Description: | Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2002-0366 | Version: | 6 |
| Platform(s): | Microsoft Windows 2000 | Product(s): | Remote Access Service (RAS) |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 837 | Microsoft Windows RAS Phonebook dial-up String Overflow |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2002-06-13 | Name : A local user can elevate his privileges. File : smb_nt_ms02-029.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:44:42 |
|
