Vulnerability Intelligence Report
CVE-2002-0884
Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error.
No Active Exploit Signals
CVSS Base Score
7.5
HIGH
EPSS Probability:2.76%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| caldera | unixware | 7.1.1 |
| caldera | openunix | 8.0 |
| sun | sunos | 5.7, 5.8 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
2.756%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2002-08-16T00:00:00 |
| Published | 2002-08-31T04:00:00 |
| Patch Date | 2002-05-22 |
| Last Updated | 2024-08-08T03:03:49 |
Community Chatter & Buzz