CVE-2002-1391 describes a buffer overflow vulnerability in the cnd-program component of mgetty versions prior to 1.1.29. This flaw allows remote attackers to trigger a denial of service and potentially execute arbitrary code by supplying a Caller ID string containing an excessively long CallerName argument. With a CVSS score of 7.5, this vulnerability is considered high severity, requiring no authentication and having low attack complexity, with potential impacts on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, and no public exploit code or significant community discussion has been identified.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.1.29CPE matchmatch criteria | cpe:2.3:a:gert_doering:mgetty:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.