Unscored severity · published Jun 18, 2002
CVE-2002-0598
Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote attackers to execute arbitrary code on the scanning system via format string…
–
CVSS
3%
EPSS
No
On KEV
Description
Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote attackers to execute arbitrary code on the scanning system via format string specifiers in the server banner.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FS
Fscan · Foundstone
1.12 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0598
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0598
Vendor Advisory
http://online.securityfocus.com/archive/1/268581
Patch
http://www.foundstone.com/knowledge/fscan112_advisory.html
Patch
http://www.iss.net/security_center/static/8895.php
Patch
http://www.securityfocus.com/bid/4549