CVE - CVE-2002-0371

CVE-ID
CVE-2002-0371	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:4930 URL:http://www.securityfocus.com/bid/4930 BUGTRAQ:20020604 Buffer overflow in MSIE gopher code URL:http://marc.info/?l=bugtraq&m=102320516707940&w=2 BUGTRAQ:20020613 Flawed workaround in MS02-027 -- gopher can run on _any_ port, not just 70 URL:http://online.securityfocus.com/archive/1/276848 BUGTRAQ:20020613 Microsoft releases critical fix that breaks their own software! URL:http://marc.info/?l=bugtraq&m=102397955217618&w=2 CERT-VN:VU#440275 URL:http://www.kb.cert.org/vuls/id/440275 MISC:http://www.pivx.com/workaround_fail.html MS:MS02-027 URL:https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-027 OVAL:oval:org.mitre.oval:def:98 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A98 XF:ie-gopher-bo(9247) URL:~~http://www.iss.net/security_center/static/9247.php~~ (Obsolete source - check if archived by the Wayback Machine)
Assigning CNA
MITRE Corporation
Date Record Created
20020508	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Modified (20061101)
Votes (Legacy)
ACCEPT(4) Baker, Cole, Foat, Wall NOOP(2) Christey, Cox
Comments (Legacy)
Christey> XF:ie-gopher-bo(9247) URL:http://www.iss.net/security_center/static/9247.php CERT-VN:VU#440275 URL:http://www.kb.cert.org/vuls/id/440275 BID:4930 URL:http://www.securityfocus.com/bid/4930 Christey> Investigate: should this include IE 5.01? Christey> Note: CVE-2002-0646 was accidentally assigned to this issue. That candidate will be rejected in favor of this one. ADDREF MS:MS02-047 ADDREF BUGTRAQ:20020729 Re: Eat gopher! URL:http://marc.theaimsgroup.com/?l=bugtraq&m=102796732424646&w=2
Proposed (Legacy)
20020726
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)