PT-2002-1895 · Caldera+1 · Open Unix+3

Published 2002-08-31 · Updated 2018-10-30 · CVE-2002-0884

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX (affected versions not specified)

Description: The issue is related to multiple format string vulnerabilities in the in.rarpd service. These vulnerabilities allow remote attackers to execute arbitrary code by providing format strings that are not properly handled in the functions syserr and error.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-0884

Affected Products

Caldera Unixware

Open Unix

Solaris

In.Rarpd

References · 6

• ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt · Vendor Advisory
• http://iss.net/security_center/static/9150.php · Vendor Advisory
• http://securityfocus.com/bid/4791 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0884 · Security Note
• http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html · Note
• http://online.securityfocus.com/archive/1/273584 · Note