CVE-2002-0033

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2002-05/0026.htmlVendor Advisory
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309Patch, Vendor Advisory
http://www.cert.org/advisories/CA-2002-11.htmlPatch, Third Party Advisory, US Government Resource
http://www.iss.net/security_center/static/8999.php
http://www.kb.cert.org/vuls/id/635811US Government Resource
http://www.securityfocus.com/bid/4674
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A124
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A31
http://archives.neohapsis.com/archives/bugtraq/2002-05/0026.htmlVendor Advisory
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309Patch, Vendor Advisory
http://www.cert.org/advisories/CA-2002-11.htmlPatch, Third Party Advisory, US Government Resource
http://www.iss.net/security_center/static/8999.php
http://www.kb.cert.org/vuls/id/635811US Government Resource
http://www.securityfocus.com/bid/4674
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A124
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A31

Timeline

Published: May 29, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-00344.6The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when conver CVE-2002-00365.0Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote attackers to cause a denial of service via a large CVE-2002-00377.5Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a CVE-2002-00385.0Vulnerability in the cache-limiting function of the unified name service daemon (nsd) in IRIX 6.5.4 through 6.5.11 allows remote attackers t CVE-2002-00395.0rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via mal CVE-2002-00402.1Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES enviro CVE-2002-00415.0Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local CVE-2002-00422.1Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) by creating a file th CVE-2002-00437.2sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain ro CVE-2002-00443.6GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files.CVE-2002-00457.5slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls CVE-2002-00465.0Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packe