Unscored CVE-2002-0219 EUVD-2002-0216GHSA-j7f4-8wcx-2rx9

Buffer overflow in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to ex…

Published May 3, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Buffer overflow in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via large command line argument.

References

http://www.sas.com/service/techsup/unotes/SN/004/004201.html
sas-sastcpd-spawner-bo(8017) vdb-entry
20020129 Re: [VulnWatch] sastcpd Buffer Overflow and Format String Vulnerabilities mailing-list
20020129 sastcpd Buffer Overflow and Format String Vulnerabilities mailing-list
3979 vdb-entry
20020129 sastcpd Buffer Overflow and Format String Vulnerabilities mailing-list