Nec Socks 5 vulnerabilities

3 CVEs affecting Nec Socks 5, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2002-2368, published 2002-12-31.

More from Nec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2002-2368, published 2002-12-31. High severity, CVSS 10.0. EPSS: 6.9% chance of exploitation in the next 30 days. Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to (1) the GetString function…
• CVE-2000-1183, published 2001-01-09. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. Buffer overflow in socks5 server on Linux allows attackers to execute arbitrary commands via a long connection request.
• CVE-1999-1435, published 1998-07-10. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow in libsocks5 library of Socks 5 (socks5) 1.0r5 allows local users to gain privileges via long environmental variables.