CVE-2002-0351

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflows in CFS daemon (cfsd) before 1.3.3-8.1, and 1.4x before 1.4.1-5, allow remote attackers to cause a denial of service and possibly execute arbitrary code.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2002/dsa-116Patch, Vendor Advisory
http://www.iss.net/security_center/static/8330.phpVendor Advisory
http://www.securityfocus.com/bid/4219
http://www.debian.org/security/2002/dsa-116Patch, Vendor Advisory
http://www.iss.net/security_center/static/8330.phpVendor Advisory
http://www.securityfocus.com/bid/4219

Timeline

Published: Jun 25, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-03525.0Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.php CVE-2002-03535.0The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a certain malformed packet, CVE-2002-03545.0The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories o CVE-2002-03552.1netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the ap CVE-2002-03567.2Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriti CVE-2002-03577.2Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges.CVE-2002-03584.6MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which CVE-2002-035910.0xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those t CVE-2002-03607.5Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the g CVE-2002-03627.5Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp req CVE-2002-03637.5ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or .setsafe to reset the current pagedevice.CVE-2002-03647.5Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing