ID CVE-2002-0885
Summary Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute arbitrary code, possibly via the functions (1) syserr and (2) error.
References
Vulnerable Configurations
  • cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*
  • cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*
    cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*
    cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*
  • cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*
    cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 30-10-2018 - 16:26)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 4791
bugtraq 20020522 [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd
misc ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt
vulnwatch 20020521 [VulnWatch] [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd
xf solaris-inrarpd-code-execution(9150)
Last major update 30-10-2018 - 16:26
Published 04-10-2002 - 04:00
Last modified 30-10-2018 - 16:26
Back to Top