CVE

Id
4664  
CVE No.
CVE-2002-0272  
Status
Candidate  
Description
Buffer overflows in mpg321 before 0.2.9 allows local and possibly remote attackers to execute arbitrary code via a long URL to (1) a command line option, (2) an HTTP request, or (3) an FTP request.  
Phase
Proposed (20020502)  
Votes
ACCEPT(2) Armstrong, Cole | MODIFY(2) Cox, Frech | NOOP(3) Christey, Foat, Wall  
Comments
Cox> "possibly" is vague. It can be exploited by remote attackers | if doing network streaming. | Christey> REDHAT:RHSA-2002:078 | CHANGE> [Frech changed vote from REVIEWING to MODIFY] | Frech> XF:mpg321-long-filename-bo(10032)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
23361 4664 CVE-2002-0272 BUGTRAQ:20020213 Re: mpg321  View
23362 4664 CVE-2002-0272 URL:http://marc.info/?l=bugtraq&m=101366518310823&w=2  View
23363 4664 CVE-2002-0272 VULN-DEV:20020212 mpg321  View
23364 4664 CVE-2002-0272 URL:http://marc.info/?l=vuln-dev&m=101355590918475&w=2  View
23365 4664 CVE-2002-0272 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=79237  View
23366 4664 CVE-2002-0272 BID:4091  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63780 JVNDB-2002-000107 Red Hat Linux の mpg321 におけるバッファオーバーフローの脆弱性 Red Hat Linux に同梱されているオーディオプレーヤーの mpg321 において、ファイルの実行時に、異常に長い名前を持つファイルを取り扱った場合に、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2002-0272 4664 10 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000107.html  View