Unscored severity · published May 29, 2002
CVE-2002-0237
Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of…
–
CVSS
3.7%
EPSS
No
On KEV
Description
Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a flood of large ICMP ping packets.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Blackice Agent · Iss
3.0; 3.1 · source: NVD
BD
Blackice Defender · Iss
2.9; 2.9cap; 2.9caq · source: NVD
RS
Realsecure Server Sensor · Iss
6.0.1; 6.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0237
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0237
marc.info
http://marc.info/?l=bugtraq&m=101286393404301&w=2
marc.info
http://marc.info/?l=bugtraq&m=101302424803268&w=2
marc.info
http://marc.info/?l=bugtraq&m=101321744807452&w=2
marc.info
http://marc.info/?l=ntbugtraq&m=101353165915171&w=2
Patch
http://www.iss.net/security_center/alerts/advise109.php
Patch
http://www.iss.net/security_center/static/8058.php
More from Blackice Agent
–
CVE-2002-0956
BlackICE Agent 3.1.eal does not always reactivate after a system standby, which could allow remote attackers and local users to bypass intended firewall restrictions
–
CVE-2002-0957
The default configuration of BlackICE Agent 3.1.eal and 3.1.ebh has a high tcp.maxconnections setting, which could allow remote attackers to cause a denial of service (memory…
–
CVE-2000-0562
BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting is Nervous or lower