← Database

CVE-2002-0391

CRITICAL CVSS: 9.8 Published: 2002-08-12 Modified: 2026-06-16

Description

Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.

Affected Platforms

Sun SolarisFreebsd FreebsdMicrosoft Windows NtMicrosoft Windows XpMicrosoft Windows 2000Openbsd OpenbsdSun Sunos

Weakness Type

CWE-190, CWE-190

References