CVE

Id
4478  
CVE No.
CVE-2002-0084  
Status
Candidate  
Description
Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argument.  
Phase
Modified (20061101)  
Votes
ACCEPT(3) Cole, Green, Wall | NOOP(3) Christey, Foat, Ziese  
Comments
Christey> CERT:CA-2002-11 | CERT-VN:VU#635811 | AUSCERT:AA-2002.01 | URL:http://www.auscert.org.au/Information/Advisories/advisory/AA-2002.01.txt | Christey> BUGTRAQ:20020429 eSecurityOnline Security Advisory 4198 - Sun Solaris cachefsd mount file buffer overflow vulnerability | URL:http://online.securityfocus.com/archive/1/270135 | Christey> ADDREF CERT-VN:VU#161931 | ADDREF BUGTRAQ:20020429 eSecurityOnline Security Advisory 4198 - Sun Solaris cachefsd mount file buffer overflow vulnerability | ADDREF CONFIRM:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309 | | Note: this is a different vulnerability than CVE-2002-0033. | However, if there are different patches for the 2 issues, then | they may need to be merged per CD:SF-LOC. | | Add that the affected function is fscache_setup() | Christey> VULNWATCH:20020429 [VulnWatch] eSecurityOnline Security Advisory 4198 - Sun Solaris cachefsd mou nt file buffer overflow vulnerability | URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0048.html | BID:4631 | URL:http://www.securityfocus.com/bid/4631  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
22032 4478 CVE-2002-0084 MISC:http://www.esecurityonline.com/advisories/eSO4198.asp  View
22033 4478 CVE-2002-0084 CERT-VN:VU#161931  View
22034 4478 CVE-2002-0084 URL:http://www.kb.cert.org/vuls/id/161931  View
22035 4478 CVE-2002-0084 CONFIRM:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309  View
22036 4478 CVE-2002-0084 BUGTRAQ:20020429 eSecurityOnline Security Advisory 4198 - Sun Solaris cachefsd mount file buffer overflow vulnerability  View
22037 4478 CVE-2002-0084 URL:http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00416.html  View
22038 4478 CVE-2002-0084 OVAL:oval:org.mitre.oval:def:43  View
22039 4478 CVE-2002-0084 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:43  View
22040 4478 CVE-2002-0084 OVAL:oval:org.mitre.oval:def:97  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64191 JVNDB-2001-000165 Sun Solaris の cachefsd におけるバッファオーバーフローの脆弱性 ------------ CVE-2002-0084 4478 7.2 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000165.html  View