« Volver al listado

CVE-2002-1865

Estado: ModificadaMedia (5)—

Buffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and (2) Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.37.2 through 1.42.7 and Linksys WAP11 1.3 and 1.4, allows remote attackers to cause a denial of service (crash) via a long header, as demonstrated using the Host header.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

D-link — Di-804D-link — Dl-704Linksys — Befw11s4Linksys — Wap11

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2002-1865",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2002-12-31T05:00:00.000",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0052.html",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/10537.php",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/6090",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0052.html",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.iss.net/security_center/static/10537.php",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/6090",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and (2) Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.37.2 through 1.42.7 and Linksys WAP11 1.3 and 1.4, allows remote attackers to cause a denial of service (crash) via a long header, as demonstrated using the Host header."
    }
  ],
  "lastModified": "2026-06-16T22:00:11.967",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:d-link:di-804:4.68:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "682B925F-6936-473E-B567-401248F9E450"
            },
            {
              "criteria": "cpe:2.3:h:d-link:dl-704:2.56_b5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E526B60-E8B4-4D52-A9D4-DFAD64422AA7"
            },
            {
              "criteria": "cpe:2.3:h:d-link:dl-704:2.56_b6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CDABE9BE-EB0D-4AC9-8916-C5E1C5365011"
            },
            {
              "criteria": "cpe:2.3:h:linksys:befw11s4:1.4.2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "42622989-F386-4C7F-8F64-7C792075D980"
            },
            {
              "criteria": "cpe:2.3:h:linksys:befw11s4:1.37.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2303BCE5-C79C-470E-A1C8-89BCEF555669"
            },
            {
              "criteria": "cpe:2.3:h:linksys:befw11s4:1.37.2b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "071EE444-052C-4FF9-83E6-D3E6C42F0448"
            },
            {
              "criteria": "cpe:2.3:h:linksys:befw11s4:1.37.9b:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26CFCACD-B22F-4CD3-A1A5-D70AEB7A58E8"
            },
            {
              "criteria": "cpe:2.3:h:linksys:befw11s4:1.40.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7E62382-218A-4F2A-828F-85A8DE1867DA"
            },
            {
              "criteria": "cpe:2.3:h:linksys:befw11s4:1.42.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "581EDB94-7607-432B-8FD0-8FB8FB587F65"
            },
            {
              "criteria": "cpe:2.3:h:linksys:wap11:1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F4B03C2B-DAB8-4BB2-BDAC-66340134B5B0"
            },
            {
              "criteria": "cpe:2.3:h:linksys:wap11:1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F357B531-7BA8-4081-A689-C56730F7F2CD"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}