Buffer overflow in Sun rpc updated since 31.07.2002
Published:		20.03.2003
Source:		X-FORCE
SecurityVulns ID:		2200
Type:		remote
Level:		10/10
Description:		Buffer overflow in xdr_array primitive

Affected:		IBM : AIX 4.3
		SUN : Solaris 2.6
		MIT : Kerberos 5
		SGI : IRIX 6.5
		SUN : Solaris 8
		SUN : Solaris 7
		GNU : glibc 2.2
		IBM : AIX 5.1
		GNU : glibc 2.1
		FREEBSD : FreeBSD 4.4
		FREEBSD : FreeBSD 4.5
		SUN : Solaris 9
		FREEBSD : FreeBSD 4.6
		OPENAFS : OpenAFS 1.0
		OPENAFS : OpenAFS 1.1
		OPENAFS : OpenAFS 1.2
		OPENAFS : OpenAFS 1.3
		MICROSOFT : Services for Unix 3.0
		IBM : AIX 5.2
		GLIBC : glibc 2.3

Original document		Tom Yu, MITKRB5-SA-2003-003: faulty length checks in xdrmem_getbytes (20.03.2003)
		CERT, CERT Advisory CA-2003-10 Integer overflow in Sun RPC XDR library routines (20.03.2003)
		REDHAT, [RHSA-2003:089-00] Updated glibc packages fix vulnerabilities in RPC XDR decoder (20.03.2003)
		EEYE, EEYE: XDR Integer Overflow (20.03.2003)
		MICROSOFT, Security Bulletin MS02-057: Flaw in Services for Unix 3.0 Interix SDK Could Allow Code Execution (Q329209) (03.10.2002)
		CERT, Advisory CA-2002-25 Integer Overflow In XDR Library (06.08.2002)
		MIT, MITKRB5-SA-2002-001: Remote root vulnerability in MIT krb5 admin system (03.08.2002)
		X-FORCE, ISS Security Brief: Remote Buffer Overflow Vulnerability in Sun RPC (31.07.2002)

Discuss:

Read or add your comments to this news (0 comments)