Oval Definition:
oval:org.mitre.oval:def:31
Revision Date
:
2010-09-20
Version
:
19
Title
:
Solaris 8/9 cachefsd Heap Overflow Vulnerability
Description
:
Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.
Family
:
unix
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2002-0033
Platform(s)
:
Sun Solaris 8
Product(s)
:
cachefsd
Definition Synopsis
Software section
File cachefsd exists
AND
NOT
Patch 110896-02 or later installed
AND
Solaris 8 or 9 installed
Solaris 8 Installed
OR
Solaris 9 Installed
AND
NOT
Patch 114008-01 or later installed
AND
Configuration section
inetd.conf contains cachefsd
AND
inetd running
AND
File cachefsd executable
File cachefsd executable
OR
File cachefsd executable
OR
File cachefsd executable
BACK