SUSE-SA:2002:031: glibc

critical Nessus Plugin ID 13753

Synopsis

The remote host is missing a vendor-supplied security patch

Description

The remote host is missing the patch for the advisory SUSE-SA:2002:031 (glibc).

An integer overflow has been discovered in the xdr_array() function, contained in the Sun Microsystems RPC/XDR library, which is part of the glibc library package on all SUSE products. This overflow allows a remote attacker to overflow a buffer, leading to remote execution of arbitrary code supplied by the attacker.

There is no temporary workaround for this security problem other than disabling all RPC based server and client programs. The permanent solution is to update the glibc packages with the update packages listed below.

Solution

http://www.suse.de/security/2002_031_glibc.html

Plugin Details

Severity: Critical

ID: 13753

File Name: suse_SA_2002_031.nasl

Version: 1.18

Agent: unix

Family: SuSE Local Security Checks

Published: 7/25/2004

Updated: 1/14/2021

Supported Sensors: Continuous Assessment, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.9

Percentile: 97.36

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

Required KB Items: Host/SuSE/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Exploitable With

CANVAS (CANVAS)

Reference Information

CVE: CVE-2002-0391

BID: 5356

Detections

Analytics