CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
96.3%
Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.
Vendor | Product | Version | CPE |
---|---|---|---|
sun | solaris | 2.5.1 | cpe:2.3:o:sun:solaris:2.5.1:*:sparc:*:*:*:*:* |
sun | solaris | 2.5.1 | cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:* |
sun | solaris | 2.6 | cpe:2.3:o:sun:solaris:2.6:*:sparc:*:*:*:*:* |
sun | solaris | 7.0 | cpe:2.3:o:sun:solaris:7.0:*:sparc:*:*:*:*:* |
sun | solaris | 7.0 | cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:* |
sun | solaris | 8.0 | cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:* |
sun | solaris | 8.0 | cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:* |
sun | sunos | - | cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:* |
archives.neohapsis.com/archives/bugtraq/2002-05/0026.html
sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309
www.cert.org/advisories/CA-2002-11.html
www.iss.net/security_center/static/8999.php
www.kb.cert.org/vuls/id/635811
www.securityfocus.com/bid/4674
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A124
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A31