CVE

CVE-2002-1998

Date: (C)2002-12-31   (M)2023-12-22

Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtable_create (procedure 21).

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.5
Exploit Score: 10.0
Impact Score: 6.4
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Reference:

http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-01/0129.html

http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-01/0127.html

CSSA-2002-SCO.12

openunix-unixware-rpccmsd-bo(8597)