CVE

Id
5275  
CVE No.
CVE-2002-0885  
Status
Candidate  
Description
Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute arbitrary code, possibly via the functions (1) syserr and (2) error.  
Phase
Proposed (20020830)  
Votes
ACCEPT(3) Baker, Cole, Frech | MODIFY(1) Alderson | NOOP(5) Armstrong, Christey, Cox, Foat, Jones  
Comments
Jones> Need clarification/verification. | Alderson> Personally, since this one is not only vague, but extremely vague | and not even confirmed, I believe it should be lumped with the previous one | that has been confirmed and is much less vague. | Christey> Correction: this is a RARP (Reverse Address Resolution | Protocol) server. | A colleague of mine with access to Solaris source has noted | that the affected syslog calls can not be fed user-supplied | data, at least for Solaris; if so, then this is not a vulnerability.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
28234 5275 CVE-2002-0885 BUGTRAQ:20020522 [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd  View
28235 5275 CVE-2002-0885 URL:http://online.securityfocus.com/archive/1/273584  View
28236 5275 CVE-2002-0885 VULNWATCH:20020521 [VulnWatch] [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd  View
28237 5275 CVE-2002-0885 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html  View
28238 5275 CVE-2002-0885 MISC:ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt  View
28239 5275 CVE-2002-0885 XF:solaris-inrarpd-code-execution(9150)  View
28240 5275 CVE-2002-0885 URL:http://www.iss.net/security_center/static/9150.php  View
28241 5275 CVE-2002-0885 BID:4791  View

Related JVN