CVE-2002-0391: Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to…

Description

Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)58.1% · higher than 99% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

FR

Freebsd · Freebsd

through 4.6.1 · source: NVD

OP

Openbsd · Openbsd

3.1 · source: NVD

SO

Solaris · Sun

2.6; 9.0 · source: NVD

SU

Sunos · Sun

5.5.1; 5.7; 5.8 · source: NVD

W2

Windows 2000 · Microsoft

All versions, or not specified · source: NVD

WN

Windows NT · Microsoft

4.0 · source: NVD

WX

Windows XP · Microsoft

All versions, or not specified · source: NVD