CVE-2002-0391
CriticalSummary
Integer overflow in the xdr_array function in RPC servers for operating systems using libc, glibc, or other code based on SunRPC, including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.
Risk Assessment
An attacker can remotely execute arbitrary code, posing a serious threat to the integrity and confidentiality of the system. This could lead to system takeover or data leakage.
Recommendation
It is recommended to update the software to the latest version that fixes this vulnerability and to restrict access to RPC services only to trusted users.
Original NVD description (English source)
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.