CVE-2002-0033: Buffer Overflow
Published May 29, 2002
·Updated
Heap-based buffer overflow in cfsdcalloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.
Affected Software
8 affected components
Sun Solaris=2.5.1
Sun Solaris=2.6
Sun Solaris=8.0
Sun Solaris=2.5.1
Sun Solaris=7.0
Sun Solaris=7.0
Sun Solaris=8.0
Sun SunOS
Remediation
Patch Available
Event History
May 29, 2002
CVE Published
04:00 AM
Apr 2, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0033?
CVE-2002-0033 has a high severity rating due to its potential to allow remote code execution.
2
How do I fix CVE-2002-0033?
To fix CVE-2002-0033, apply the latest patches provided by Oracle for affected Solaris versions.
3
Which versions of Solaris are affected by CVE-2002-0033?
CVE-2002-0033 affects Solaris versions 2.5.1, 2.6, 7.0, and 8.0.
4
What is the main exploit for CVE-2002-0033?
The main exploit for CVE-2002-0033 involves a heap-based buffer overflow that can be triggered by sending a specially crafted request with long directory and cache names.
5
Can CVE-2002-0033 be exploited remotely?
Yes, CVE-2002-0033 can be exploited remotely by attackers without physical access to the system.