CVE-2002-0366: Microsoft Windows 2000

High severity, CVSS 7.2. EPSS: 2.8% chance of exploitation in the next 30 days.

Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows Nt: version 4.0 only
• Microsoft Windows XP: any version

Published 2002-07-03. Last modified 2026-06-16.