CVE-2002-0033: Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute a...

Security readout for executives and security teams

This is an old Solaris cachefsd flaw that could let a remote attacker run code by sending an oversized directory and cache name. The business risk is concentrated in legacy Solaris environments, especially systems still exposing cachefsd. The source bundle does not provide exact affected versions or current vendor patch details. Most exposure is likely in legacy Solaris hosts using CacheFS/cachefsd, particularly where the service is reachable over a network. Modern environments are exposed only if old Solaris systems remain in production, lab, or embedded operational roles. Prioritize if legacy Solaris remains in scope, especially in production or operational technology networks. If no Solaris cachefsd systems exist, residual business risk is low. The main uncertainty is incomplete affected-version and patch detail in the supplied sources. Mitigation focus: Inventory Solaris systems and determine whether cachefsd or CacheFS is enabled.; Check Sun/Oracle and CERT guidance for applicable patches or configuration changes.; Disable cachefsd or CacheFS where there is no operational requirement..

Prepared

Jun 30, 2026, 15:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.