CVE ID:	CVE-2002-1317
Description:	Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.
Test IDs:	1.3.6.1.4.1.25623.1.0.11188
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1317 BugTraq ID: 6241 http://www.securityfocus.com/bid/6241 Bugtraq: 20021125 ISS Security Brief: Solaris fs.auto Remote Compromise Vulnerability (Google Search) http://marc.info/?l=bugtraq&m=103825150527843&w=2 Cert/CC Advisory: CA-2002-34 http://www.cert.org/advisories/CA-2002-34.html CERT/CC vulnerability note: VU#312313 http://www.kb.cert.org/vuls/id/312313 Computer Incident Advisory Center Bulletin: N-024 http://www.ciac.org/ciac/bulletins/n-024.shtml HPdes Security Advisory: HPSBUX0212-228 http://www.securityfocus.com/advisories/4988 ISS Security Advisory: 20021125 Solaris fs.auto Remote Compromise Vulnerability http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21541 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A149 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A152 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2816 SGI Security Advisory: 20021202-01-I ftp://patches.sgi.com/support/free/security/advisories/20021202-01-I XForce ISS Database: solaris-fsauto-execute-code(10375) http://www.iss.net/security_center/static/10375.php