CVE-2002-0884: High severity Caldera UnixWare vulnerability
Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0884?
CVE-2002-0884 is classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary code.
How do I fix CVE-2002-0884?
To mitigate CVE-2002-0884, it is recommended to patch the affected systems or disable the in.rarpd service if it is not in use.
Which systems are vulnerable to CVE-2002-0884?
CVE-2002-0884 affects Solaris, Caldera UnixWare 7.1.1, Open UNIX 8.0, and specific versions of SunOS, including 5.7 and 5.8.
What exploitation techniques can be used for CVE-2002-0884?
Exploitation of CVE-2002-0884 can involve sending crafted format strings to the syserr and error functions, leading to arbitrary code execution.
Is CVE-2002-0884 still a risk today?
While CVE-2002-0884 is an older vulnerability, if outdated systems or software versions are still in use, they continue to pose a significant risk.