Skip to content

CVE-2002-1566

netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option,...

5.0 MediumPublic exploitFix available

CVE-2002-1566 is a medium vulnerability (CVSS 5.0) in Netris, published August 15, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.39%, the 88th percentile. Fixed in netris 0.52-1.

netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.

Exploit likelihood

3.39%Down 0.8 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.

Record: CVE-2002-1566
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.

Record: CVE-2002-1566
Updated: 2026-11-02

EUVDEUVD-2002-1548 No score

netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.

Record: EUVD-2002-1548
Updated: 2026-11-03

GitHub AdvisoriesGHSA-8f4h-52c3-crrw No score

netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option,...

netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.

Record: GHSA-8f4h-52c3-crrw
Updated: 2026-11-02

OSV No score

netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.

Record: CVE-2002-1566
Updated: 2026-11-02

OSVDEBIAN-CVE-2002-1566 No score

netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.

Record: DEBIAN-CVE-2002-1566
Updated: 2026-11-02

Affected products

netris

Affected packages

Affected packages
Package	Affected	Fixed
`netris` Debian:12	before 0.52-1	0.52-1
`netris` Debian:14	before 0.52-1, plus listed versions 0.4-30.5-20.5-2.0.10.5-4woody1	0.52-1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Netris 0.3/0.4/0.5 - Remote Memory Corruption	2002-09-09

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

References