CVE

Id
5274  
CVE No.
CVE-2002-0884  
Status
Candidate  
Description
Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error.  
Phase
Proposed (20020830)  
Votes
ACCEPT(5) Alderson, Armstrong, Baker, Cole, Frech | MODIFY(1) Jones | NOOP(3) Christey, Cox, Foat  
Comments
Jones> Suggest description: "...allows remote attackers to execute | arbitrary code via the functions (1) syserr and | (2) error." | Christey> Correction: this is a RARP (Reverse Address Resolution | Protocol) server. | | A colleague of mine with access to Solaris source has noted | that the affected syslog calls can not be fed user-supplied | data, at least for Solaris; if so, then this is not a vulnerability. | Baker> I think you leave the description as it specifies how the attacker is able to execute arbitrary commands.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
28225 5274 CVE-2002-0884 BUGTRAQ:20020522 [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd  View
28226 5274 CVE-2002-0884 URL:http://online.securityfocus.com/archive/1/273584  View
28227 5274 CVE-2002-0884 VULNWATCH:20020521 [VulnWatch] [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd  View
28228 5274 CVE-2002-0884 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html  View
28229 5274 CVE-2002-0884 CALDERA:CSSA-2002-SCO.29  View
28230 5274 CVE-2002-0884 URL:ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt  View
28231 5274 CVE-2002-0884 XF:solaris-inrarpd-code-execution(9150)  View
28232 5274 CVE-2002-0884 URL:http://www.iss.net/security_center/static/9150.php  View
28233 5274 CVE-2002-0884 BID:4791  View

Related JVN