CVE-2002-0884 Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via....
HighCVSS 7.5
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| caldera unixware | = 7.1.1 | No fix listed |
| caldera openunix | = 8.0 | No fix listed |
| sunos | = 5.7 | No fix listed |
| sunos | = 5.8 | No fix listed |
References
- 20020521 [VulnWatch] [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd mailing-list
- 20020522 [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd mailing-list
- solaris-inrarpd-code-execution(9150) vdb-entry vendor-advisory
- 4791 patch vdb-entry vendor-advisory