VDB
CVE-2002-0033
CVE-2002-0033
PUBLISHED
CVSS 10 CRITICAL
Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.
EPSS 23.08% · 97.6th percentile
Risk Scores
CVSS 2.0
10
EPSS Score
23.08%
97.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| sun | sunos | |
| n/a | n/a | n/a |
| sun | solaris | 2.5.1, 2.6, 7.0 |
Timeline
- CVE Published
- Jan 1, 2002 PoC Published
- Sep 23, 2010 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Apr 17, 2023 EPSS Score
References
- VU#635811 third-party-advisory
- solaris-cachefsd-name-bo(8999) vdb
- oval:org.mitre.oval:def:31 vdb
- http://www.securityfocus.com/bid/4674 technical
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309 patch
- http://www.cert.org/advisories/CA-2002-11.html patch
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A124 technical
- https://nvd.nist.gov/vuln/detail/CVE-2002-0033 advisory
- http://archives.neohapsis.com/archives/bugtraq/2002-05/0026.html url