CVEvulnerability
CVE-2002-0884
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-10-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error.
Affected configurations
• caldera unixware 7.1.1
• caldera openunix 8.0
• sun sunos 5.7
• sun sunos 5.8
References
- ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt ftp.caldera.com
- http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html archives.neohapsis.com
- http://online.securityfocus.com/archive/1/273584 online.securityfocus.com
- http://www.iss.net/security_center/static/9150.php Vendor Advisory
- http://www.securityfocus.com/bid/4791 Patch, Vendor Advisory
- ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt ftp.caldera.com
- http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html archives.neohapsis.com
- http://online.securityfocus.com/archive/1/273584 online.securityfocus.com
- http://www.iss.net/security_center/static/9150.php Vendor Advisory
- http://www.securityfocus.com/bid/4791 Patch, Vendor Advisory