National Cyber-Alert System

Vulnerability Summary for CVE-2002-0391

Overview

Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

CERT/CC Advisory: CA-2002-25

Name: CA-2002-25

Type: Advisory; Patch Information

Hyperlink:http://www.cert.org/advisories/CA-2002-25.html

US-CERT Vulnerability Note: VU#192995

Name: VU#192995

Hyperlink:http://www.kb.cert.org/vuls/id/192995

External Source: ISS

Name: 20020731 Remote Buffer Overflow Vulnerability in Sun RPC

Type: Advisory

Hyperlink:http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20823

External Source: BID

Name: 5356

Hyperlink:http://www.securityfocus.com/bid/5356

External Source: REDHAT

Name: RHSA-2003:212

Hyperlink:http://www.redhat.com/support/errata/RHSA-2003-212.html

External Source: REDHAT

Name: RHSA-2003:168

Hyperlink:http://www.redhat.com/support/errata/RHSA-2003-168.html

External Source: REDHAT

Name: RHSA-2002:173

Hyperlink:http://www.redhat.com/support/errata/RHSA-2002-173.html

External Source: REDHAT

Name: RHSA-2002:167

Hyperlink:http://www.redhat.com/support/errata/RHSA-2002-167.html

External Source: MS

Name: MS02-057

Hyperlink:http://www.microsoft.com/technet/security/bulletin/ms02-057.asp

External Source: MANDRAKE

Name: MDKSA-2002:057

Hyperlink:http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:057

External Source: ENGARDE

Name: ESA-20021003-021

Hyperlink:http://www.linuxsecurity.com/advisories/other_advisory-2399.html

External Source: XF

Name: sunrpc-xdr-array-bo(9170)

Hyperlink:http://www.iss.net/security_center/static/9170.php

External Source: DEBIAN

Name: DSA-333

Hyperlink:http://www.debian.org/security/2003/dsa-333

External Source: DEBIAN

Name: DSA-149

Hyperlink:http://www.debian.org/security/2002/dsa-149

External Source: DEBIAN

Name: DSA-146

Hyperlink:http://www.debian.org/security/2002/dsa-146

External Source: DEBIAN

Name: DSA-143

Hyperlink:http://www.debian.org/security/2002/dsa-143

External Source: DEBIAN

Name: DSA-142

Hyperlink:http://www.debian.org/security/2002/dsa-142

External Source: REDHAT

Name: RHSA-2002:172

Hyperlink:http://rhn.redhat.com/errata/RHSA-2002-172.html

External Source: REDHAT

Name: RHSA-2002:166

Hyperlink:http://rhn.redhat.com/errata/RHSA-2002-166.html

External Source: BUGTRAQ

Name: 20020802 kerberos rpc xdr_array

Hyperlink:http://online.securityfocus.com/archive/1/285740

External Source: HP

Name: HPSBTL0208-061

Hyperlink:http://online.securityfocus.com/advisories/4402

External Source: BUGTRAQ

Name: 20020909 GLSA: glibc

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=103158632831416&w=2

External Source: BUGTRAQ

Name: 20020802 MITKRB5-SA-2002-001: Remote root vulnerability in MIT krb5 admin

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=102831443208382&w=2

External Source: FREEBSD

Name: FreeBSD-SA-02:34.rpc

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=102821928418261&w=2

External Source: BUGTRAQ

Name: 20020801 RPC analysis

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=102821785316087&w=2

External Source: BUGTRAQ

Name: 20020731 Remote Buffer Overflow Vulnerability in Sun RPC

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=102813809232532&w=2

External Source: CONECTIVA

Name: CLA-2002:535

Hyperlink:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000535

External Source: CONECTIVA

Name: CLA-2002:515

Hyperlink:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000515

External Source: HP

Name: HPSBUX0209-215

Hyperlink:http://archives.neohapsis.com/archives/hp/2002-q3/0077.html

External Source: BUGTRAQ

Name: 20020803 OpenAFS Security Advisory 2002-001: Remote root vulnerability in OpenAFS servers

Hyperlink:http://archives.neohapsis.com/archives/bugtraq/2002-07/0514.html

External Source: AIXAPAR

Name: IY34194

Hyperlink:http://archives.neohapsis.com/archives/aix/2002-q4/0002.html

External Source: SGI

Name: 20020801-01-P

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20020801-01-A

External Source: NETBSD

Name: NetBSD-SA2002-011

Hyperlink:ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-011.txt.asc

External Source: CALDERA

Name: CSSA-2002-055.0

Hyperlink:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-055.0.txt

US Government Resource: oval:org.mitre.oval:def:9

Name: oval:org.mitre.oval:def:9

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9

US Government Resource: oval:org.mitre.oval:def:4728

Name: oval:org.mitre.oval:def:4728

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4728

US Government Resource: oval:org.mitre.oval:def:42

Name: oval:org.mitre.oval:def:42

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:42