PT-2002-1895 · Caldera+1 · Open Unix+3

Publicado 2002-08-31 · Atualizado 2018-10-30 · CVE-2002-0884

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX (affected versions not specified)

Description: The issue is related to multiple format string vulnerabilities in the in.rarpd service. These vulnerabilities allow remote attackers to execute arbitrary code by providing format strings that are not properly handled in the functions syserr and error.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-0884

Produtos afetados

Caldera Unixware

Open Unix

Solaris

In.Rarpd

Referências · 6

• ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt · Aviso do Fabricante
• http://iss.net/security_center/static/9150.php · Aviso do Fabricante
• http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html · Nota
• http://online.securityfocus.com/archive/1/273584 · Nota
• http://securityfocus.com/bid/4791 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0884 · Nota de Segurança