Security readout for executives and security teams
Plain-English summary
CVE-2002-0830 is an old denial-of-service flaw in NFS affecting FreeBSD 4.6.1 RELEASE-p7 and earlier, NetBSD 1.5.3 and earlier, and possibly other systems. A remote attacker could make an affected NFS service hang. There is no source evidence provided of active exploitation.
Executive priority
Treat as a legacy exposure issue. Prioritize if critical file services still run affected BSD versions or if NFS is externally reachable. Otherwise, handle through legacy system retirement and network hardening programs.
Technical view
NFS handling of an RPC message with a zero-length payload can cause the server to reference a previous payload and enter an infinite loop. The CVE names FreeBSD 4.6.1 RELEASE-p7 and earlier and NetBSD 1.5.3 and earlier; broader operating-system impact is stated only as possible.
Likely exposure
Exposure is most likely in legacy BSD systems running NFS, especially where NFS/RPC is reachable from untrusted networks. Modern supported systems are less likely to be affected, but the provided sources do not confirm exact fixed versions.
Exploitation context
The described impact is service hang, not code execution or data theft. Exploitation would require network reachability to the vulnerable NFS service. CISA KEV is false, and the provided sources do not report active exploitation.
Researcher notes
Evidence is limited to the CVE description and IBM X-Force reference. The record lists generic affected metadata, and no CVSS, CWE, exploit status, or named patch is provided. The phrase “possibly other operating systems” is not specific enough for attribution.
Mitigation direction
- Identify and retire or upgrade legacy FreeBSD and NetBSD systems running NFS.
- Restrict NFS/RPC access to trusted hosts and internal networks only.
- Check FreeBSD, NetBSD, or appliance vendor guidance for applicable fixes.
- Disable NFS where it is not business-required.
- Monitor exposed legacy NFS services for hangs or availability loss.
Validation and detection
- Inventory systems for FreeBSD 4.6.1-p7 or earlier and NetBSD 1.5.3 or earlier.
- Confirm whether NFS services are enabled on identified legacy hosts.
- Verify NFS/RPC is not reachable from untrusted networks.
- Review outage history for unexplained NFS hangs on legacy systems.
- Document vendor support status and remediation owner for each affected host.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2002-0830 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- bsd-nfs-rpc-dos(9772)CVE reference · vdb-entry, x_refsource_XF
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.