CVE-2002-0391
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc,...
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.
- Record
CVE-2002-0391- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-190
- Updated
- 2026-11-02
CVE List
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.
- Record
CVE-2002-0391- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
EUVDEUVD-2002-0388
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.
- Record
EUVD-2002-0388- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2qf2-q2gj-r6v2 No score
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc,...
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.
- Record
GHSA-2qf2-q2gj-r6v2- Updated
- 2026-11-02
OSV
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.
- Record
CVE-2002-0391- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2002-0391
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.
- Record
DEBIAN-CVE-2002-0391- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
acmDebian:12 |
before 5.0-10 | 5.0-10 |
acmDebian:13 |
before 5.0-10 | 5.0-10 |
dietlibcDebian:12 |
before 0.20-0cvs20020808 | 0.20-0cvs20020808 |
dietlibcDebian:13 |
before 0.20-0cvs20020808 | 0.20-0cvs20020808 |
dietlibcDebian:14 |
before 0.20-0cvs20020808 | 0.20-0cvs20020808 |
glibcDebian:12 |
before 2.2.5-13 | 2.2.5-13 |
glibcDebian:13 |
before 2.2.5-13 | 2.2.5-13 |
glibcDebian:14 |
before 2.2.5-13 | 2.2.5-13 |
krb5Debian:12 |
before 1.2.5-2 | 1.2.5-2 |
krb5Debian:13 |
before 1.2.5-2 | 1.2.5-2 |
Show 8 moreShow less
| Package | Affected | Fixed |
|---|---|---|
krb5Debian:14 |
before 1.2.5-2 | 1.2.5-2 |
openafsDebian:12 |
before 1.2.6-1 | 1.2.6-1 |
openafsDebian:13 |
before 1.2.6-1 | 1.2.6-1 |
openafsDebian:3.0 |
before 1.2.3final2-6 | 1.2.3final2-6 |
krb5Debian:3.0 |
before 1.2.4-5woody1 | 1.2.4-5woody1 |
dietlibcDebian:3.0 |
before 0.12-2.4 | 0.12-2.4 |
glibcDebian:3.0 |
before 2.2.5-11.1 | 2.2.5-11.1 |
acmDebian:3.0 |
before 5.0-3.woody.1 | 5.0-3.woody.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-0391 is a critical vulnerability (CVSS 9.8) in Freebsd, published August 5, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 58.1%, the 99th percentile. Fixed in acm 5.0-10.
References
iss.net/security_center/static/9170.php
cert.org/advisories/CA-2002-25.html
online.securityfocus.com/advisories/4402
marc.info?l=bugtraq&m=103158632831416&w=2
debian.org/security/2002/dsa-146
rhn.redhat.com/errata/RHSA-2002-166.html
Show 31 moreShow less
archives.neohapsis.com/archives/hp/2002-q3/0077.html
bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20823
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000515
redhat.com/support/errata/RHSA-2003-212.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-057
securityfocus.com/bid/5356
kb.cert.org/vuls/id/192995
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4728
linuxsecurity.com/advisories/other_advisory-2399.html
mandrakesoft.com/security/advisories?name=MDKSA-2002:057
nvd.nist.gov/vuln/detail/CVE-2002-0391
github.com/advisories/GHSA-2qf2-q2gj-r6v2
security-tracker.debian.org/tracker/CVE-2002-0391