Unscored severity · published Mar 8, 2002
CVE-2002-0020
Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options
–
CVSS
16.9%
EPSS
No
On KEV
Description
Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options.
Exploitation
Is it being used?
Exploit prediction (EPSS)16.9% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
Interix · Microsoft
2.2 · source: NVD
W2
Windows 2000 · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0020
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0020
Patch
http://www.iss.net/security_center/static/8094.php
Patch
http://www.securityfocus.com/bid/4061
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-004
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A424
More from Interix
7.8
CVE-2004-0210
Microsoft Windows Privilege Escalation Vulnerability
–
CVE-2009-0537
Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to…