CVE-2002-0039: Medium severity SGI IRIX vulnerability
Published Mar 28, 2002
·Updated
rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via malformed RPC packets with invalid lengths.
Affected Software
21 affected components
SGI IRIX=6.5
SGI IRIX=6.5.1
SGI IRIX=6.5.2
SGI IRIX=6.5.3
SGI IRIX=6.5.4
SGI IRIX=6.5.5
SGI IRIX=6.5.6
SGI IRIX=6.5.7
SGI IRIX=6.5.8
SGI IRIX=6.5.9
SGI IRIX=6.5.10
SGI IRIX=6.5.11f
SGI IRIX=6.5.11m
SGI IRIX=6.5.12f
SGI IRIX=6.5.12m
SGI IRIX=6.5.13f
SGI IRIX=6.5.13m
SGI IRIX=6.5.14f
SGI IRIX=6.5.14m
SGI IRIX=6.5.15f
SGI IRIX=6.5.15m
Remediation
Event History
Mar 28, 2002
CVE Published
05:00 AM
Mar 30, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0039?
CVE-2002-0039 is considered a denial of service vulnerability that can cause the rpcbind service to crash.
2
How do I fix CVE-2002-0039?
To fix CVE-2002-0039, update to the latest version of SGI IRIX that addresses this vulnerability.
3
Which versions of SGI IRIX are affected by CVE-2002-0039?
CVE-2002-0039 affects SGI IRIX versions 6.5 through 6.5.15f, and possibly earlier versions.
4
What component is vulnerable in CVE-2002-0039?
The vulnerable component in CVE-2002-0039 is the rpcbind service.
5
Can CVE-2002-0039 be exploited remotely?
Yes, CVE-2002-0039 allows remote attackers to exploit the vulnerability by sending malformed RPC packets.