CVE-2002-0391 Integer overflow in n/a

Critical 9.8 Published 2 Apr 2003 Updated 16 Jan 2025

Remote attackers can execute arbitrary code via integer overflow in xdr_array function within SunRPC-based libc implementations.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2002-0391?

CVE-2002-0391 is a critical vulnerability in Freebsd Freebsd, published on 2 Apr 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.

Weakness: CWE-190

Which versions are affected by CVE-2002-0391?

It affects 7 products.

Products include Freebsd Freebsd, Microsoft Windows 2000, Microsoft Windows Nt, Microsoft Windows Xp, Openbsd Openbsd, Sun Solaris and 1 more.

How do I fix CVE-2002-0391?

Apply the vendor's patch.

Is CVE-2002-0391 being exploited?

There is no known exploitation of CVE-2002-0391 in the wild and no public exploit code.

All Freebsd Freebsd vulnerabilities

Sources

Also known as DEBIAN-CVE-2002-0391, DSA-142, DSA-143, DSA-146, DSA-149, DSA-333 and 1 more.