Vulnerability in N/a
CVE-2002-1317
Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.
EPSS: 0.502 (97.9th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- HPSBUX0212-228 (x_refsource_HP, vendor-advisory)
- sunsolve.sun.com/pub-cgi/retrieve.pl (x_refsource_CONFIRM)
- 20021125 ISS Security Brief: Solaris fs.auto Remote Compromise Vulnerability (mailing-list, x_refsource_BUGTRAQ)
- oval:org.mitre.oval:def:149 (signature, x_refsource_OVAL, vdb-entry)
- CA-2002-34 (x_refsource_CERT, third-party-advisory)
- oval:org.mitre.oval:def:152 (signature, x_refsource_OVAL, vdb-entry)
- oval:org.mitre.oval:def:2816 (signature, x_refsource_OVAL, vdb-entry)
- VU#312313 (x_refsource_CERT-VN, third-party-advisory)
- 20021125 Solaris fs.auto Remote Compromise Vulnerability (x_refsource_ISS, third-party-advisory)
- solaris-fsauto-execute-code(10375) (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2002-1317?
- CVE-2002-1317 is a vulnerability in N/a. Published 2004-09-01.
- Is CVE-2002-1317 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.