CVE-2002-2368: Nec Socks 5

High severity, CVSS 10.0. EPSS: 6.9% chance of exploitation in the next 30 days.

Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to (1) the GetString function in proxy.c for the SOCKS5 module or (2) the HandleS4Connection function in proxy.c for the SOCKS4 module.

Affected products

• Nec Socks 5: up to and including 1.0r11

Published 2002-12-31. Last modified 2026-06-16.