VDB
CVE-2002-0401
CVE-2002-0401
PUBLISHED
CVSS 7.5 HIGH
SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL pointer.
EPSS 5.51% · 92.0th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
5.51%
92.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ethereal | ethereal | 0 |
| debian | debian_linux | 2.2 |
| n/a | n/a | n/a |
Timeline
- Jun 18, 2002 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 26, 2023 EPSS Score
- Jul 18, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
References
- http://www.ethereal.com/appnotes/enpa-sa-00004.html url
- CSSA-2002-037.0 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2002-0401 advisory
- http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505 url
- http://marc.info/?l=bugtraq&m=102268626526119&w=2 url
- http://www.redhat.com/support/errata/RHSA-2002-036.html url
- http://www.securityfocus.com/bid/4806 url
- http://www.debian.org/security/2002/dsa-130 patch
- http://www.redhat.com/support/errata/RHSA-2002-088.html technical
- http://www.iss.net/security_center/static/9204.php technical