Unscored severity · published Oct 4, 2002
CVE-2002-0884
Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to…
–
CVSS
2.8%
EPSS
No
On KEV
Description
Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openunix · Caldera
8.0 · source: NVD
SU
Sunos · Sun
5.7; 5.8 · source: NVD
UN
Unixware · Caldera
7.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0884
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0884
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html
online.securityfocus.com
http://online.securityfocus.com/archive/1/273584
Vendor Advisory
http://www.iss.net/security_center/static/9150.php
Patch
http://www.securityfocus.com/bid/4791
More from Openunix
–
CVE-2002-1231
SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc
–
CVE-2002-0885
Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute…
–
CVE-2002-0988
Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities
–
CVE-2002-0987
X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges
–
CVE-2002-0981
Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code via a long command line