CVE-2002-0391

Published: Aug 12, 2002Modified: Apr 16, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.

Affected (10)

Products: Freebsd: Freebsd · Openbsd: Openbsd · Sun: Solaris, Sunos · +1 more

Show all products

Freebsd: Freebsd · Openbsd: Openbsd · Sun: Solaris, Sunos · Microsoft: Windows 2000, Windows Nt, Windows Xp

1 product

1 product

2 products

3 products

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Up to 4.6.1
Openbsd Openbsd	Version 3.1
Sun Solaris	Version 2.6
Sun Solaris	Version 9.0
Sun Sunos	Version 5.5.1
Sun Sunos	Version 5.7
Sun Sunos	Version 5.8

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows Nt	Version 4.0
Microsoft Windows Xp	All versions

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (76)

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-055.0.txt (unsafe URL)

Source: cve@mitre.org

Broken Link

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-011.txt.asc (unsafe URL)

Source: cve@mitre.org

Broken Link

ftp://patches.sgi.com/support/free/security/advisories/20020801-01-A (unsafe URL)

Source: cve@mitre.org

Broken Link

ftp://patches.sgi.com/support/free/security/advisories/20020801-01-P (unsafe URL)

Source: cve@mitre.org

Broken Link

http://archives.neohapsis.com/archives/aix/2002-q4/0002.html

Source: cve@mitre.org

Broken Link

http://archives.neohapsis.com/archives/bugtraq/2002-07/0514.html

Source: cve@mitre.org

Broken Link

http://archives.neohapsis.com/archives/hp/2002-q3/0077.html

Source: cve@mitre.org

Broken Link

http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20823

Source: cve@mitre.org

Broken LinkVendor Advisory

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000515

Source: cve@mitre.org

Broken Link

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000535

Source: cve@mitre.org

Broken Link

http://marc.info/?l=bugtraq&m=102813809232532&w=2

Source: cve@mitre.org

ExploitMailing List

http://marc.info/?l=bugtraq&m=102821785316087&w=2

Source: cve@mitre.org

ExploitMailing List

http://marc.info/?l=bugtraq&m=102821928418261&w=2

Source: cve@mitre.org

ExploitMailing List

http://marc.info/?l=bugtraq&m=102831443208382&w=2

Source: cve@mitre.org

ExploitMailing List

http://marc.info/?l=bugtraq&m=103158632831416&w=2

Source: cve@mitre.org

Mailing List

http://online.securityfocus.com/advisories/4402

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://online.securityfocus.com/archive/1/285740

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://rhn.redhat.com/errata/RHSA-2002-166.html

Source: cve@mitre.org

Broken Link

http://rhn.redhat.com/errata/RHSA-2002-172.html

Source: cve@mitre.org

Broken Link

http://www.cert.org/advisories/CA-2002-25.html

Source: cve@mitre.org

PatchThird Party AdvisoryUS Government Resource

http://www.debian.org/security/2002/dsa-142

Source: cve@mitre.org

Broken Link

http://www.debian.org/security/2002/dsa-143

Source: cve@mitre.org

Broken Link

http://www.debian.org/security/2002/dsa-146

Source: cve@mitre.org

Broken Link

http://www.debian.org/security/2002/dsa-149

Source: cve@mitre.org

Broken Link

http://www.debian.org/security/2003/dsa-333

Source: cve@mitre.org

Broken Link

http://www.iss.net/security_center/static/9170.php

Source: cve@mitre.org

Broken Link

http://www.kb.cert.org/vuls/id/192995

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.linuxsecurity.com/advisories/other_advisory-2399.html

Source: cve@mitre.org

Broken Link

http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:057

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2002-167.html

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2002-173.html

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2003-168.html

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2003-212.html

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/bid/5356

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-057

Source: cve@mitre.org

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A42

Source: cve@mitre.org

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4728

Source: cve@mitre.org

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9

Source: cve@mitre.org

Broken Link

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-055.0.txt (unsafe URL)