What’s Vulnerable › Vulnerabilities

CVE-2002-2368

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2002-12-31 · updated 2026-06-16
• Weakness: CWE-119

Description

Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to (1) the GetString function in proxy.c for the SOCKS5 module or (2) the HandleS4Connection function in proxy.c for the SOCKS4 module.

Affected products

• NEC Socks 5: through 1.0r11

References

• http://archives.neohapsis.com/archives/bugtraq/2002-07/0033.html
• http://www.iss.net/security_center/static/9485.php
• http://www.securityfocus.com/bid/5145
• http://www.securityfocus.com/bid/5147
• http://archives.neohapsis.com/archives/bugtraq/2002-07/0033.html
• http://www.iss.net/security_center/static/9485.php
• http://www.securityfocus.com/bid/5145
• http://www.securityfocus.com/bid/5147

Get alerted when CVE-2002-2368 or the next vulnerability affects your stack