01 Record

CVE-2002-0391

Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by

CriticalPUBLISHEDCNA: mitre

CNA base score9.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

58.13% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 99.0% of scored records. A rank, not a probability.

NVD base score

9.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-16.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2003-04-02 05:00Z23 YR AGO

Last updated

2025-01-16 17:20Z1 YR AGO

Reserved

2002-05-28

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Critical (CVSS 9.8)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-190Integer Overflow or WraparoundBase

Data version

5.1

Document digest

4eb7bf642dcd9bac3df8e55d3c3ca1ad8f9a2ccede5ce31e4246199a291aa71a

05 Affected products

VendorProductVersionsPlatforms

freebsdfreebsdNot specified—

microsoftwindows_2000Not specified—

microsoftwindows_ntNot specified—

microsoftwindows_xpNot specified—

openbsdopenbsdNot specified—

redhatenterprise_linuxNot specified—

redhatlinuxNot specified—

sunsolarisNot specified—

sunsunosNot specified—

06 References

www.iss.netsunrpc-xdr-array-bo(9170)http://www.iss.net/security_center/static/9170.phpvdb-entryx_refsource_XF
patches.sgi.com20020801-01-Aftp://patches.sgi.com/support/free/security/advisories/20020801-01-Avendor-advisoryx_refsource_SGI
www.cert.orgCA-2002-25http://www.cert.org/advisories/CA-2002-25.htmlthird-party-advisoryx_refsource_CERT
online.securityfocus.comHPSBTL0208-061http://online.securityfocus.com/advisories/4402vendor-advisoryx_refsource_HP
marc.info20020909 GLSA: glibchttp://marc.info/?l=bugtraq&m=103158632831416&w=2mailing-listx_refsource_BUGTRAQ
www.debian.orgDSA-146http://www.debian.org/security/2002/dsa-146vendor-advisoryx_refsource_DEBIAN
rhn.redhat.comRHSA-2002:166http://rhn.redhat.com/errata/RHSA-2002-166.htmlvendor-advisoryx_refsource_REDHAT
archives.neohapsis.comHPSBUX0209-215http://archives.neohapsis.com/archives/hp/2002-q3/0077.htmlvendor-advisoryx_refsource_HP
ftp.caldera.comCSSA-2002-055.0ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-055.0.txtvendor-advisoryx_refsource_CALDERA
www.debian.orgDSA-143http://www.debian.org/security/2002/dsa-143vendor-advisoryx_refsource_DEBIAN
bvlive01.iss.net20020731 Remote Buffer Overflow Vulnerability in Sun RPChttp://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20823third-party-advisoryx_refsource_ISS
patches.sgi.com20020801-01-Pftp://patches.sgi.com/support/free/security/advisories/20020801-01-Pvendor-advisoryx_refsource_SGI
distro.conectiva.com.brCLA-2002:515http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000515vendor-advisoryx_refsource_CONECTIVA
distro.conectiva.com.brCLA-2002:535http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000535vendor-advisoryx_refsource_CONECTIVA
www.redhat.comRHSA-2003:212http://www.redhat.com/support/errata/RHSA-2003-212.htmlvendor-advisoryx_refsource_REDHAT
docs.microsoft.comMS02-057https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-057vendor-advisoryx_refsource_MS
www.debian.orgDSA-142http://www.debian.org/security/2002/dsa-142vendor-advisoryx_refsource_DEBIAN
ftp.netbsd.orgNetBSD-SA2002-011ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-011.txt.ascvendor-advisoryx_refsource_NETBSD
archives.neohapsis.comIY34194http://archives.neohapsis.com/archives/aix/2002-q4/0002.htmlvendor-advisoryx_refsource_AIXAPAR
www.redhat.comRHSA-2002:167http://www.redhat.com/support/errata/RHSA-2002-167.htmlvendor-advisoryx_refsource_REDHAT
archives.neohapsis.com20020803 OpenAFS Security Advisory 2002-001: Remote root vulnerability in OpenAFS servershttp://archives.neohapsis.com/archives/bugtraq/2002-07/0514.htmlmailing-listx_refsource_BUGTRAQ
marc.infoFreeBSD-SA-02:34.rpchttp://marc.info/?l=bugtraq&m=102821928418261&w=2vendor-advisoryx_refsource_FREEBSD
www.redhat.comRHSA-2002:173http://www.redhat.com/support/errata/RHSA-2002-173.htmlvendor-advisoryx_refsource_REDHAT
www.securityfocus.com5356http://www.securityfocus.com/bid/5356vdb-entryx_refsource_BID
online.securityfocus.com20020802 kerberos rpc xdr_arrayhttp://online.securityfocus.com/archive/1/285740mailing-listx_refsource_BUGTRAQ
marc.info20020731 Remote Buffer Overflow Vulnerability in Sun RPChttp://marc.info/?l=bugtraq&m=102813809232532&w=2mailing-listx_refsource_BUGTRAQ
marc.info20020801 RPC analysishttp://marc.info/?l=bugtraq&m=102821785316087&w=2mailing-listx_refsource_BUGTRAQ
www.kb.cert.orgVU#192995http://www.kb.cert.org/vuls/id/192995third-party-advisoryx_refsource_CERT-VN
rhn.redhat.comRHSA-2002:172http://rhn.redhat.com/errata/RHSA-2002-172.htmlvendor-advisoryx_refsource_REDHAT
oval.cisecurity.orgoval:org.mitre.oval:def:4728https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4728vdb-entrysignaturex_refsource_OVAL
oval.cisecurity.orgoval:org.mitre.oval:def:42https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A42vdb-entrysignaturex_refsource_OVAL
www.linuxsecurity.comESA-20021003-021http://www.linuxsecurity.com/advisories/other_advisory-2399.htmlvendor-advisoryx_refsource_ENGARDE
oval.cisecurity.orgoval:org.mitre.oval:def:9https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9vdb-entrysignaturex_refsource_OVAL
www.mandrakesoft.comMDKSA-2002:057http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:057vendor-advisoryx_refsource_MANDRAKE
www.debian.orgDSA-149http://www.debian.org/security/2002/dsa-149vendor-advisoryx_refsource_DEBIAN
marc.info20020802 MITKRB5-SA-2002-001: Remote root vulnerability in MIT krb5 adminhttp://marc.info/?l=bugtraq&m=102831443208382&w=2mailing-listx_refsource_BUGTRAQ
www.debian.orgDSA-333http://www.debian.org/security/2003/dsa-333vendor-advisoryx_refsource_DEBIAN
www.redhat.comRHSA-2003:168http://www.redhat.com/support/errata/RHSA-2003-168.htmlvendor-advisoryx_refsource_REDHAT

01 Record index

CVE-2002-0391

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2002-0391

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References