UpHeron
All vulnerabilities

Servers and applications

CVE-2002-0684

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.

Severity
High 7.5
Published
12 Aug 2002
Last changed
16 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
5.9% in the next 30 daysHigher than 93% of CVEs. EPSS by FIRST, 12 Nov 2026
Attack
Over the network · No login needed
Attacker can
Read some data · Change some data · Slow it down
CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Sources
NVD

Affected software

SoftwareAffected versions
GNU C LibraryServers and applications · cpe:a:gnu:glibc
  • Every version up to 2.2.5
BIND 9Servers and applications · cpe:a:isc:bind
  • Version 4.9.8

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2002-0684
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2002-0684