Oval Definition:
oval:org.mitre.oval:def:124
Revision Date
:
2010-09-20
Version
:
18
Title
:
Solaris 7 cachefsd Heap Overflow Vulnerability
Description
:
Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.
Family
:
unix
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2002-0033
Platform(s)
:
Sun Solaris 7
Product(s)
:
cachefsd
Definition Synopsis
Software section
Solaris 7 Installed
AND
File cachefsd exists
AND
NOT
Patch 108800-02 or later installed
AND
Configuration section
inetd.conf contains cachefsd
AND
inetd running
AND
File cachefsd executable
File cachefsd executable
OR
File cachefsd executable
OR
File cachefsd executable
BACK