CVE-2003-0028

Exploit

EPSS 15.03%
Veröffentlicht 25.03.2003 05:00:00
Zuletzt bearbeitet 16.06.2026 22:01:22
Erkennungen
Login

Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 28

NVD 165 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Gnu ≫ Glibc Version 2.1

Gnu ≫ Glibc Version 2.1.1

Gnu ≫ Glibc Version 2.1.2

Gnu ≫ Glibc Version 2.1.3

Gnu ≫ Glibc Version 2.2

Gnu ≫ Glibc Version 2.2.1

Gnu ≫ Glibc Version 2.2.2

Gnu ≫ Glibc Version 2.2.3

Gnu ≫ Glibc Version 2.2.4

Gnu ≫ Glibc Version 2.2.5

Gnu ≫ Glibc Version 2.3

Gnu ≫ Glibc Version 2.3.1

Gnu ≫ Glibc Version 2.3.2

Mit ≫ Kerberos 5 Version 1.2

Mit ≫ Kerberos 5 Version 1.2.1

Mit ≫ Kerberos 5 Version 1.2.2

Mit ≫ Kerberos 5 Version 1.2.3

Mit ≫ Kerberos 5 Version 1.2.4

Mit ≫ Kerberos 5 Version 1.2.5

Mit ≫ Kerberos 5 Version 1.2.6

Mit ≫ Kerberos 5 Version 1.2.7

Openafs ≫ Openafs Version 1.0

Openafs ≫ Openafs Version 1.0.1

Openafs ≫ Openafs Version 1.0.2

Openafs ≫ Openafs Version 1.0.3

Openafs ≫ Openafs Version 1.0.4

Openafs ≫ Openafs Version 1.0.4a

Openafs ≫ Openafs Version 1.1

Openafs ≫ Openafs Version 1.1.1

Openafs ≫ Openafs Version 1.1.1a

Openafs ≫ Openafs Version 1.2

Openafs ≫ Openafs Version 1.2.1

Openafs ≫ Openafs Version 1.2.2

Openafs ≫ Openafs Version 1.2.2a

Openafs ≫ Openafs Version 1.2.2b

Openafs ≫ Openafs Version 1.2.3

Openafs ≫ Openafs Version 1.2.4

Openafs ≫ Openafs Version 1.2.5

Openafs ≫ Openafs Version 1.2.6

Openafs ≫ Openafs Version 1.3

Openafs ≫ Openafs Version 1.3.1

Openafs ≫ Openafs Version 1.3.2

Sgi ≫ Irix Version 6.5

Sgi ≫ Irix Version 6.5.1

Sgi ≫ Irix Version 6.5.2

Sgi ≫ Irix Version 6.5.2f

Sgi ≫ Irix Version 6.5.2m

Sgi ≫ Irix Version 6.5.3

Sgi ≫ Irix Version 6.5.3f

Sgi ≫ Irix Version 6.5.3m

Sgi ≫ Irix Version 6.5.4

Sgi ≫ Irix Version 6.5.4f

Sgi ≫ Irix Version 6.5.4m

Sgi ≫ Irix Version 6.5.5

Sgi ≫ Irix Version 6.5.5f

Sgi ≫ Irix Version 6.5.5m

Sgi ≫ Irix Version 6.5.6

Sgi ≫ Irix Version 6.5.6f

Sgi ≫ Irix Version 6.5.6m

Sgi ≫ Irix Version 6.5.7

Sgi ≫ Irix Version 6.5.7f

Sgi ≫ Irix Version 6.5.7m

Sgi ≫ Irix Version 6.5.8

Sgi ≫ Irix Version 6.5.8f

Sgi ≫ Irix Version 6.5.8m

Sgi ≫ Irix Version 6.5.9

Sgi ≫ Irix Version 6.5.9f

Sgi ≫ Irix Version 6.5.9m

Sgi ≫ Irix Version 6.5.10

Sgi ≫ Irix Version 6.5.10f

Sgi ≫ Irix Version 6.5.10m

Sgi ≫ Irix Version 6.5.11

Sgi ≫ Irix Version 6.5.11f

Sgi ≫ Irix Version 6.5.11m

Sgi ≫ Irix Version 6.5.12

Sgi ≫ Irix Version 6.5.12f

Sgi ≫ Irix Version 6.5.12m

Sgi ≫ Irix Version 6.5.13

Sgi ≫ Irix Version 6.5.13f

Sgi ≫ Irix Version 6.5.13m

Sgi ≫ Irix Version 6.5.14

Sgi ≫ Irix Version 6.5.14f

Sgi ≫ Irix Version 6.5.14m

Sgi ≫ Irix Version 6.5.15

Sgi ≫ Irix Version 6.5.15f

Sgi ≫ Irix Version 6.5.15m

Sgi ≫ Irix Version 6.5.16

Sgi ≫ Irix Version 6.5.16f

Sgi ≫ Irix Version 6.5.16m

Sgi ≫ Irix Version 6.5.17

Sgi ≫ Irix Version 6.5.17f

Sgi ≫ Irix Version 6.5.17m

Sgi ≫ Irix Version 6.5.18

Sgi ≫ Irix Version 6.5.18f

Sgi ≫ Irix Version 6.5.18m

Sgi ≫ Irix Version 6.5.19

Sgi ≫ Irix Version 6.5.20

Cray ≫ Unicos Version 6.0

Cray ≫ Unicos Version 6.0e

Cray ≫ Unicos Version 6.1

Cray ≫ Unicos Version 7.0

Cray ≫ Unicos Version 8.0

Cray ≫ Unicos Version 8.3

Cray ≫ Unicos Version 9.0

Cray ≫ Unicos Version 9.0.2.5

Cray ≫ Unicos Version 9.2

Cray ≫ Unicos Version 9.2.4

Freebsd ≫ Freebsd Version 4.0

Freebsd ≫ Freebsd Version 4.1

Freebsd ≫ Freebsd Version 4.1.1

Freebsd ≫ Freebsd Version 4.1.1 Update release

Freebsd ≫ Freebsd Version 4.1.1 Update stable

Freebsd ≫ Freebsd Version 4.2

Freebsd ≫ Freebsd Version 4.2 Update stable

Freebsd ≫ Freebsd Version 4.3

Freebsd ≫ Freebsd Version 4.3 Update release

Freebsd ≫ Freebsd Version 4.3 Update stable

Freebsd ≫ Freebsd Version 4.4

Freebsd ≫ Freebsd Version 4.4 Update stable

Freebsd ≫ Freebsd Version 4.5

Freebsd ≫ Freebsd Version 4.5 Update release

Freebsd ≫ Freebsd Version 4.5 Update stable

Freebsd ≫ Freebsd Version 4.6

Freebsd ≫ Freebsd Version 4.6 Update release

Freebsd ≫ Freebsd Version 4.6 Update stable

Freebsd ≫ Freebsd Version 4.6.2

Freebsd ≫ Freebsd Version 4.7

Freebsd ≫ Freebsd Version 4.7 Update release

Freebsd ≫ Freebsd Version 4.7 Update stable

Freebsd ≫ Freebsd Version 5.0

Hp ≫ Hp-ux Version 10.20

Hp ≫ Hp-ux Version 10.24

Hp ≫ Hp-ux Version 11.00

Hp ≫ Hp-ux Version 11.04

Hp ≫ Hp-ux Version 11.11

Hp ≫ Hp-ux Version 11.20

Hp ≫ Hp-ux Version 11.22

Hp ≫ Hp-ux Series 700 Version 10.20

Hp ≫ Hp-ux Series 800 Version 10.20

Ibm ≫ Aix Version 4.3.3

Ibm ≫ Aix Version 5.1

Ibm ≫ Aix Version 5.2

Openbsd ≫ Openbsd Version 2.0

Openbsd ≫ Openbsd Version 2.1

Openbsd ≫ Openbsd Version 2.2

Openbsd ≫ Openbsd Version 2.3

Openbsd ≫ Openbsd Version 2.4

Openbsd ≫ Openbsd Version 2.5

Openbsd ≫ Openbsd Version 2.6

Openbsd ≫ Openbsd Version 2.7

Openbsd ≫ Openbsd Version 2.8

Openbsd ≫ Openbsd Version 2.9

Openbsd ≫ Openbsd Version 3.0

Openbsd ≫ Openbsd Version 3.1

Openbsd ≫ Openbsd Version 3.2

Sun ≫ Solaris Version 2.5.1 Edition x86

Sun ≫ Solaris Version 2.6

Sun ≫ Solaris Version 7.0 Edition x86

Sun ≫ Solaris Version 8.0 Edition x86

Sun ≫ Solaris Version 9.0 Edition sparc

Sun ≫ Solaris Version 9.0 Edition x86

Sun ≫ Sunos Version -

Sun ≫ Sunos Version 5.5.1

Sun ≫ Sunos Version 5.7

Sun ≫ Sunos Version 5.8

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	15.03%	0.963

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.redhat.com/support/errata/RHSA-2003-051.html

http://www.redhat.com/support/errata/RHSA-2003-052.html

http://www.debian.org/security/2003/dsa-266

http://www.redhat.com/support/errata/RHSA-2003-091.html

http://www.securityfocus.com/archive/1/316960/30/25250/threaded

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-008.txt.asc

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0140.html

http://marc.info/?l=bugtraq&m=104810574423662&w=2

http://marc.info/?l=bugtraq&m=104811415301340&w=2

http://marc.info/?l=bugtraq&m=104860855114117&w=2

http://marc.info/?l=bugtraq&m=104878237121402&w=2

http://marc.info/?l=bugtraq&m=105362148313082&w=2

http://www.cert.org/advisories/CA-2003-10.html

Patch

Third Party Advisory

US Government Resource

http://www.debian.org/security/2003/dsa-272

http://www.debian.org/security/2003/dsa-282

http://www.eeye.com/html/Research/Advisories/AD20030318.html

Vendor Advisory

Exploit

http://www.kb.cert.org/vuls/id/516825

US Government Resource

http://www.linuxsecurity.com/advisories/engarde_advisory-3024.html

http://www.mandriva.com/security/advisories?name=MDKSA-2003:037

http://www.novell.com/linux/security/advisories/2003_027_glibc.html

http://www.redhat.com/support/errata/RHSA-2003-089.html

http://www.securityfocus.com/archive/1/315638/30/25430/threaded

http://www.securityfocus.com/archive/1/316931/30/25250/threaded

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A230

https://security.netapp.com/advisory/ntap-20150122-0002/

https://nvd.nist.gov/vuln/detail/CVE-2003-0028

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2003-0028

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2003-0028

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2003-0028