imPC@ndo IT

Tracker / CVE-2002-0391

CVE-2002-0391

Critical 9.8

Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.

Affected products and versions

freebsd freebsd · … → 4.6.1
microsoft windows_2000
microsoft windows_nt
microsoft windows_xp
openbsd openbsd
sun solaris
sun sunos

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References