vulnwire
5.0med

CVE-2002-1141

An input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 20…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
13.9%
percentile 97%
Public exploits
0
none known

An input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service via malformed fragmented RPC client packets, aka "Denial of service by sending an invalid RPC request."

Exploit prediction (EPSS)

13.90% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:N/A:P

References

  • docs.microsoft.com /en-us/security-updates/securitybulletins/2002/ms02-057 · vendor-advisory, x_refsource_MS, x_transferred
  • securityfocus.com /bid/5880 · vdb-entry, x_refsource_BID, x_transferred
  • iss.net /security_center/static/10259.php · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.