CVE-2002-1566 Denial of service in n/a
Remote attackers can crash the netris game client by sending a long string to port 9284 when the wait option is enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2002-1566?
CVE-2002-1566 is a medium-severity denial of service vulnerability in n/a, published on 15 Aug 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.
Which versions are affected by CVE-2002-1566?
It affects 1 product.
Products include Netris Netris.
How do I fix CVE-2002-1566?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2002-1566 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2002-1566 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2002-1566, GHSA-8f4h-52c3-crrw.