7.5
CVE-2003-0028
- EPSS 56.05%
- Published 25.03.2003 05:00:00
- Last modified 03.04.2025 01:03:51
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
Data is provided by the National Vulnerability Database (NVD)
Mit ≫ Kerberos 5 Version1.2
Mit ≫ Kerberos 5 Version1.2.1
Mit ≫ Kerberos 5 Version1.2.2
Mit ≫ Kerberos 5 Version1.2.3
Mit ≫ Kerberos 5 Version1.2.4
Mit ≫ Kerberos 5 Version1.2.5
Mit ≫ Kerberos 5 Version1.2.6
Mit ≫ Kerberos 5 Version1.2.7
Hp ≫ Hp-ux Series 700 Version10.20
Hp ≫ Hp-ux Series 800 Version10.20
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 56.05% | 0.979 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|