CVE Feed

    Dashboard / CVE / CVE-2002-0029

    CVE-2002-0029

    Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the (1) getnetbyname, or (2) getnetbyaddr functions, aka "LIBRESOLV: buffer overrun" and a different vulnerability than CVE-2002-0684.

    Published:Nov 12, 2002
    Last Modified:Apr 16, 2026
    EPS:Nov 21, 2002
    EPSS Score:0.21847
    CVSS Score:7.5

    Affected Products

    Vendor
    Astaro
    Product
    Security Linux
    Vendor
    Isc
    Product
    Bind
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2005-3985 (CVSS 7.8) — The Internet Key Exchange version 1 (IKEv1) implementation in Astaro Security Linux before 6.102 allows remote…
    CVE-2005-3100 (CVSS 5) — Unspecified "PPTP Remote DoS Vulnerability" in Astaro Security Linux 4.027 allows attackers to cause a denial …
    CVE-2005-2731 (CVSS 2.1) — Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated…
    CVE-2005-2729 (CVSS 7.5) — The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which…
    CVE-2005-2730 (CVSS 5) — The HTTP proxy in Astaro Security Linux 6.0 allows remote attackers to obtain sensitive information via an inv…
    CVE-2004-2251 (CVSS 5) — The PPTP server in Astaro Security Linux before 4.024 provides information about its version, which makes it e…
    CVE-2002-1737 (CVSS 2.1) — Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrit…

    References

    ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-028.txt.asc
    ftp://patches.sgi.com/support/free/security/advisories/20021201-01-P
    http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html
    http://www.cert.org/advisories/CA-2002-31.html
    http://www.isc.org/products/BIND/bind-security.html
    http://www.iss.net/security_center/static/10624.php
    http://www.kb.cert.org/vuls/id/844360
    http://www.securityfocus.com/bid/6186
    ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-028.txt.asc
    ftp://patches.sgi.com/support/free/security/advisories/20021201-01-P
    http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html
    http://www.cert.org/advisories/CA-2002-31.html
    http://www.isc.org/products/BIND/bind-security.html
    http://www.iss.net/security_center/static/10624.php
    http://www.kb.cert.org/vuls/id/844360
    http://www.securityfocus.com/bid/6186

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High