{"id":"CVE-2002-0366","aliases":["EUVD-2002-0363","GHSA-2jp3-r2v3-cr4c"],"status":"published","title":"Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and...","description":"Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03017,"percentile":0.87516,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2002-07-03T04:00:00Z","modified":"2026-06-16T21:57:17Z","products":[{"vendor":"microsoft","product":"windows_2000"},{"vendor":"microsoft","product":"windows_nt"},{"vendor":"microsoft","product":"windows_xp"}],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A63","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://online.securityfocus.com/archive/1/276776","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A61","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://online.securityfocus.com/archive/1/278145","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.nextgenss.com/vna/ms-ras.txt","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4852","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-029","tags":["vendor-advisory","x_refsource_MS","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-0366"},{"url":"https://github.com/advisories/GHSA-2jp3-r2v3-cr4c"}],"sources":{"cve":[{"id":"CVE-2002-0366","description":"Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.","status":"published","published":"2003-04-02T05:00:00Z","modified":"2024-08-08T02:49:27.407Z","updated_at":"2026-11-02T14:33:55.642267Z"}],"euvd":[{"id":"EUVD-2002-0363","description":"Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.","status":"published","published":"2003-04-02T05:00:00Z","modified":"2024-08-08T02:49:27Z","updated_at":"2026-11-03T01:15:01.057971Z"}],"ghsa":[{"id":"GHSA-2jp3-r2v3-cr4c","title":"Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and...","description":"Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.","status":"published","published":"2022-04-30T18:19:05Z","modified":"2023-01-30T05:05:49Z","updated_at":"2026-11-02T14:47:21.568004Z"}],"nvd":[{"id":"CVE-2002-0366","description":"Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.","status":"published","published":"2002-07-03T04:00:00Z","modified":"2026-06-16T21:57:17.743Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:42.220505Z"}]}}