CVE-2002-1194 Memory corruption in n/a

What is CVE-2002-1194?

CVE-2002-1194 is a high-severity memory corruption vulnerability in Netbsd Netbsd, published on 15 Oct 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to execute arbitrary code via a long inbound message.

Which versions are affected by CVE-2002-1194?

It affects 1 product.

Products include Netbsd Netbsd.

How do I fix CVE-2002-1194?

No fix has been published for CVE-2002-1194 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2002-1194 being exploited?

There is no known exploitation of CVE-2002-1194 in the wild and no public exploit code.

Other vulnerabilities in Netbsd Netbsd

• CVE-2017-1000374 Security feature bypass in n/a Critical 9.8
• CVE-2017-1000375 Memory corruption in n/a Critical 9.8
• CVE-2017-1000378 Denial of service in n/a Critical 9.8
• CVE-2015-8212 Command injection in n/a Critical 9.8
• CVE-2008-3584 Denial of service in n/a Critical 9.3

All Netbsd Netbsd vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-p887-85m2-5wj7.