CVE-2002-0033

SUN Solaris - Buffer Overflow

Title source: rule

Description

Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Last Stage of Delirium · cremotesolaris

https://www.exploit-db.com/exploits/21437

View Code ZIP pw:eip

References (8)

[Patch, Vendor Advisory] http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A124

[US Government Resource] http://www.kb.cert.org/vuls/id/635811

[Patch, Third Party Advisory, US Government Resource] http://www.cert.org/advisories/CA-2002-11.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/4674

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A31

[Vendor Advisory] http://archives.neohapsis.com/archives/bugtraq/2002-05/0026.html

[Third Party Advisory] http://www.iss.net/security_center/static/8999.php

Scores

EPSS 0.5547

EPSS Percentile 98.1%

Details

Status published

Products (5)

sun/solaris 2.5.1 (2 CPE variants)

sun/solaris 2.6

sun/solaris 7.0 (2 CPE variants)

sun/solaris 8.0 (2 CPE variants)

sun/sunos

Published May 29, 2002

Tracked Since Feb 18, 2026