PT-2002-1896 · Oracle+1 · In.Rarpd+3

Publicado 2002-08-31 · Atualizado 2018-10-30 · CVE-2002-0885

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: in.rarpd on Solaris (affected versions not specified) in.rarpd on Caldera UnixWare (affected versions not specified) in.rarpd on Open UNIX (affected versions not specified)

Description: The issue is related to multiple buffer overflows in the in.rarpd service, which is an ARP server. This allows remote attackers to execute arbitrary code. The buffer overflows may occur via the syserr and error functions.

Recommendations: For in.rarpd on Solaris, consider disabling the service until a patch is available. For in.rarpd on Caldera UnixWare, restrict access to the vulnerable service to minimize the risk of exploitation. For in.rarpd on Open UNIX, avoid using the vulnerable functions syserr and error in the in.rarpd service until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-0885

Produtos afetados

Caldera Unixware

Open Unix

Solaris

In.Rarpd

Referências · 6

• http://iss.net/security_center/static/9150.php · Aviso do Fabricante
• http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0885 · Nota de Segurança
• http://online.securityfocus.com/archive/1/273584 · Nota
• http://securityfocus.com/bid/4791 · Aviso do Fabricante
• ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt · Nota