CVE-2002-0391: Integer Overflow
Flaw bug created to hold information about an old flaw we knew something about. For more details see the MITRE CVE description.
Other sources
Integer overflow in xdrarray function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdrarray through RPC services such as rpc.cmsd and dmispd.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0391?
The severity of CVE-2002-0391 is considered to be high due to the potential for remote code execution.
How do I fix CVE-2002-0391?
To fix CVE-2002-0391, update to a version of the affected software that includes patches for this vulnerability.
Which operating systems are impacted by CVE-2002-0391?
CVE-2002-0391 affects several operating systems including FreeBSD, OpenBSD, Solaris, SunOS, and Microsoft Windows.
What is the nature of the attack vector for CVE-2002-0391?
CVE-2002-0391 allows a remote attacker to exploit an integer overflow in the xdr_array function.
Is CVE-2002-0391 still a risk for modern systems?
CVE-2002-0391 may still pose a risk if legacy systems or unsupported versions of affected software are in use.