CVE-2002-1912

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SkyStream EMR5000 1.16 through 1.18 does not drop packets or disable the Ethernet interface when the buffers are full, which allows remote attackers to cause a denial of service (null pointer exception and kernel panic) via a large number of packets.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.globalintersec.com/adv/skystream-2002021001.txtBroken Link, Exploit, Patch
http://www.iss.net/security_center/static/10380.phpBroken Link
http://www.securityfocus.com/archive/1/295516Broken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/5977Broken Link, Third Party Advisory, VDB Entry
http://www.globalintersec.com/adv/skystream-2002021001.txtBroken Link, Exploit, Patch
http://www.iss.net/security_center/static/10380.phpBroken Link
http://www.securityfocus.com/archive/1/295516Broken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/5977Broken Link, Third Party Advisory, VDB Entry

Timeline

Published: Dec 31, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-19135.0phptonuke.php in myPHPNuke 1.8.8 allows remote attackers to read arbitrary files via a full pathname in the filnavn variable.CVE-2002-19145.5dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates CVE-2002-19155.5tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock CVE-2002-19165.0Pirch and RusPirch, when auto-log is enabled, allows remote attackers to cause a denial of service (crash) via a nickname containing an MS-D CVE-2002-19175.0CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail CVE-2002-191810.0Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with CVE-2002-19197.5SQL injection vulnerability in shopadmin.asp in VP-ASP 4.0 allows remote attackers to execute arbitrary SQL commands and bypass authenticati CVE-2002-19205.0Buffer overflow in FtpXQ 2.5 allows remote attackers to cause a denial of service (crash) via a MKD command with a long directory name.CVE-2002-19217.5The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, wh CVE-2002-19224.3Cross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers to inject arbitrary CVE-2002-19237.5The default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not have logging enabled, which could allow remote CVE-2002-19245.0PowerChute plus 5.0.2 creates a "Pwrchute" directory during installation that is shared and world writeable, which could allow remote attack