CVE-2002-0391
Fixed in a distro release EPSS 58%CVSS 9.8
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.
Products: freebsd, openbsd, sun solaris, sunos, microsoft windows_2000, microsoft windows_nt, microsoft windows_xp
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | acm | 5.0-10 |
| Debian 12 | dietlibc | 0.20-0cvs20020808 |
| Debian 12 | glibc | 2.2.5-13 |
| Debian 12 | krb5 | 1.2.5-2 |
| Debian 12 | openafs | 1.2.6-1 |
| Debian 13 | acm | 5.0-10 |
| Debian 13 | dietlibc | 0.20-0cvs20020808 |
| Debian 13 | glibc | 2.2.5-13 |
| Debian 13 | krb5 | 1.2.5-2 |
| Debian 13 | openafs | 1.2.6-1 |
| Debian 14 | dietlibc | 0.20-0cvs20020808 |
| Debian 14 | glibc | 2.2.5-13 |
| Debian 14 | krb5 | 1.2.5-2 |
| Debian 3.0 | acm | 5.0-3.woody.1 |
| Debian 3.0 | dietlibc | 0.12-2.4 |
| Debian 3.0 | glibc | 2.2.5-11.1 |
| Debian 3.0 | krb5 | 1.2.4-5woody1 |
| Debian 3.0 | openafs | 1.2.3final2-6 |