CVE-2002-0387

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-03-18 · updated 2026-06-16

Description

Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to execute arbitrary code via a long HTTP request URL.

Affected products

Sun One Application Server: 6.0, 6.5

References

http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/52022
http://www.atstake.com/research/advisories/2003/a031303-1.txt
http://www.ciac.org/ciac/bulletins/n-064.shtml
http://www.securityfocus.com/bid/7082
https://exchange.xforce.ibmcloud.com/vulnerabilities/11529
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/52022
http://www.atstake.com/research/advisories/2003/a031303-1.txt
http://www.ciac.org/ciac/bulletins/n-064.shtml
http://www.securityfocus.com/bid/7082
https://exchange.xforce.ibmcloud.com/vulnerabilities/11529

Get alerted when CVE-2002-0387 or the next vulnerability affects your stack