CVE-2002-0884

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html
http://online.securityfocus.com/archive/1/273584
http://www.iss.net/security_center/static/9150.phpVendor Advisory
http://www.securityfocus.com/bid/4791Patch, Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html
http://online.securityfocus.com/archive/1/273584
http://www.iss.net/security_center/static/9150.phpVendor Advisory
http://www.securityfocus.com/bid/4791Patch, Vendor Advisory

Timeline

Published: Oct 4, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-08857.5Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX CVE-2002-08865.0Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via (CVE-2002-08872.1scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files,CVE-2002-08887.53Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access restrictions by connectin CVE-2002-08894.6Buffer overflow in Qpopper (popper) 4.0.4 and earlier allows local users to cause a denial of service and possibly execute arbitrary code vi CVE-2002-08915.0The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers CVE-2002-08925.0The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct req CVE-2002-08935.0Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded requ CVE-2002-08945.0NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2)CVE-2002-08957.5Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execute arbitrary code vi CVE-2002-08965.0The throttle capability in Swatch may fail to report certain events if (1) the same type of event occurs after the throttle period, or (2) w CVE-2002-08977.5LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" d