CVE-2002-2138

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-12-31 · updated 2026-06-16

Description

RFC-NETBIOS in HP Advanced Server/9000 B.04.05 through B.04.09, when running HP-UX 11.00 or 11.11, allows remote attackers to cause a denial of service (panic) via a malformed UDP packet on port 139.

Affected products

HP Advanced Server 9000: b.04.05, b.04.06, b.04.07, b.04.08, b.04.09
Hewlett Packard Enterprise (HPE) HP-UX: 11.00, 11.4, 11.11

References

http://online.securityfocus.com/advisories/4268
http://www.iss.net/security_center/static/9536.php
http://www.securityfocus.com/bid/5195
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5654
http://online.securityfocus.com/advisories/4268
http://www.iss.net/security_center/static/9536.php
http://www.securityfocus.com/bid/5195
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5654

Get alerted when CVE-2002-2138 or the next vulnerability affects your stack