« Volver al listado

CVE-2002-0237

Estado: ModificadaAlta (7.5)—

Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a flood of large ICMP ping packets.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

ISS — Blackice AgentISS — Blackice DefenderISS — Realsecure Server Sensor

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2002-0237",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2002-05-29T04:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=101286393404301&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=101302424803268&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=101321744807452&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=ntbugtraq&m=101353165915171&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/alerts/advise109.php",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/8058.php",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/4025",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=101286393404301&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=101302424803268&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=101321744807452&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=ntbugtraq&m=101353165915171&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.iss.net/security_center/alerts/advise109.php",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.iss.net/security_center/static/8058.php",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/4025",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a flood of large ICMP ping packets."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en ISS BlackICE Defender 2.9 y anteriores, BlackICE Agente 3.0 y 3.1, y RealSecure Server Sensor 6.01 y 6.5 permiten a atacantes remotos que provoquen una denegación de servicio (caida) y posiblemente ejecutar código arbitrario por medio de un envío masivo de grandes paquetes ping ICMP."
    }
  ],
  "lastModified": "2026-06-16T21:57:03.247",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:iss:blackice_agent:3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2C0D024D-1DF8-4217-A55C-3C1CF8F66748"
            },
            {
              "criteria": "cpe:2.3:a:iss:blackice_agent:3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F100EB2-F19A-4152-BE63-2E778A4192D4"
            },
            {
              "criteria": "cpe:2.3:a:iss:blackice_defender:2.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "55FCF98C-82F6-48DE-B6BF-FF49EB99FC7E"
            },
            {
              "criteria": "cpe:2.3:a:iss:blackice_defender:2.9cap:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF0B47D0-535D-4DEA-8B56-BB7562CAFD34"
            },
            {
              "criteria": "cpe:2.3:a:iss:blackice_defender:2.9caq:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D2911E3-FAAB-4B7A-BAA6-FA0629DAC78F"
            },
            {
              "criteria": "cpe:2.3:a:iss:realsecure_server_sensor:6.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0507ADDC-7606-4AAF-BB6E-D0A5272DFD5C"
            },
            {
              "criteria": "cpe:2.3:a:iss:realsecure_server_sensor:6.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0695D9C7-3FCF-4BDE-8189-FE986EE680DA"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}