PT-2002-1171 · Oracle · Cachefsd

Published 2002-03-07 · Updated 2018-10-30 · CVE-2002-0084

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions cachefsd versions 2.6 through 8

Description A buffer overflow issue exists in the fscache setup function of cachefsd, allowing local users to gain root privileges by providing a long mount argument.

Recommendations For versions 2.6 through 8, apply the necessary patch to fix the buffer overflow issue in the fscache setup function to prevent local users from gaining root privileges.

Fix

Related Identifiers

CVE-2002-0084

Affected Products

Cachefsd

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2002-0084 · Security Note
• http://esecurityonline.com/advisories/eSO4198.asp · Vendor Advisory
• http://kb.cert.org/vuls/id/161931 · Note
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A43 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A97 · Note
• http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00416.html · Note