7.5

CVE-2003-0849

Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction function when using a buffer provided by the BusyWithConnection function.

Data is provided by the National Vulnerability Database (NVD)
Gnu ≫ Cfengine Version2.0.0
Gnu ≫ Cfengine Version2.0.1
Gnu ≫ Cfengine Version2.0.2
Gnu ≫ Cfengine Version2.0.3
Gnu ≫ Cfengine Version2.0.4
Gnu ≫ Cfengine Version2.0.5
Gnu ≫ Cfengine Version2.0.5 Updateb1
Gnu ≫ Cfengine Version2.0.5 Updatepre
Gnu ≫ Cfengine Version2.0.5 Updatepre2
Gnu ≫ Cfengine Version2.0.6
Gnu ≫ Cfengine Version2.0.7
Gnu ≫ Cfengine Version2.0.7 Updatep1
Gnu ≫ Cfengine Version2.0.7 Updatep2
Gnu ≫ Cfengine Version2.0.7 Updatep3
Gnu ≫ Cfengine Version2.1.0 Updatea6
Gnu ≫ Cfengine Version2.1.0 Updatea8
Gnu ≫ Cfengine Version2.1.0 Updatea9
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 7.68% 0.91
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P