CVE-2002-0033

2003-04-0205:00:00

mitre

web.nvd.nist.gov

solaris

cachefsd

heap overflow

buffer overflow

remote attack

execute arbitrary code

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.194

Percentile

96.3%

JSON

Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.

Affected configurations

Nvd

Node

sunsolarisMatch2.5.1sparc

sunsolarisMatch2.5.1x86

sunsolarisMatch2.6sparc

sunsolarisMatch7.0sparc

sunsolarisMatch7.0x86

sunsolarisMatch8.0sparc

sunsolarisMatch8.0x86

sunsunosMatch-

VendorProductVersionCPE
sunsolaris2.5.1cpe:2.3:o:sun:solaris:2.5.1:*:sparc:*:*:*:*:*
sunsolaris2.5.1cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*
sunsolaris2.6cpe:2.3:o:sun:solaris:2.6:*:sparc:*:*:*:*:*
sunsolaris7.0cpe:2.3:o:sun:solaris:7.0:*:sparc:*:*:*:*:*
sunsolaris7.0cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*
sunsolaris8.0cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*
sunsolaris8.0cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*
sunsunos-cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sun	solaris	2.5.1	cpe:2.3:o:sun:solaris:2.5.1::sparc:::::
sun	solaris	2.5.1	cpe:2.3:o:sun:solaris:2.5.1::x86:::::
sun	solaris	2.6	cpe:2.3:o:sun:solaris:2.6::sparc:::::
sun	solaris	7.0	cpe:2.3:o:sun:solaris:7.0::sparc:::::
sun	solaris	7.0	cpe:2.3:o:sun:solaris:7.0::x86:::::
sun	solaris	8.0	cpe:2.3:o:sun:solaris:8.0::sparc:::::
sun	solaris	8.0	cpe:2.3:o:sun:solaris:8.0::x86:::::
sun	sunos	-	cpe:2.3:o:sun:sunos:-:::::::*