CVE-2002-0391: Freebsd

Critical severity, CVSS 9.8. EPSS: 58.1% chance of exploitation in the next 30 days.

Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.

Affected products

• Freebsd Freebsd: up to and including 4.6.1
• Microsoft Windows 2000: affected versions not specified
• Microsoft Windows Nt: version 4.0 only
• Microsoft Windows XP: affected versions not specified
• OpenBSD OpenBSD: version 3.1 only
• Sun Solaris: version 2.6 only; version 9.0 only
• Sun Sunos: version 5.5.1 only; version 5.7 only; version 5.8 only

Published 2002-08-12. Last modified 2026-06-16.