Lucene search

[email protected]NVD:CVE-2003-0028

HistoryMar 25, 2003 - 5:00 a.m.

CVE-2003-0028

2003-03-2505:00:00

[email protected]

web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

AI Score

Confidence

High

0.968 High

EPSS

Percentile

99.7%

JSON

Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.

Affected configurations

NVD

Node

gnuglibcMatch2.1

gnuglibcMatch2.1.1

gnuglibcMatch2.1.2

gnuglibcMatch2.1.3

gnuglibcMatch2.2

gnuglibcMatch2.2.1

gnuglibcMatch2.2.2

gnuglibcMatch2.2.3

gnuglibcMatch2.2.4

gnuglibcMatch2.2.5

gnuglibcMatch2.3

gnuglibcMatch2.3.1

gnuglibcMatch2.3.2

mitkerberos_5Match1.2

mitkerberos_5Match1.2.1

mitkerberos_5Match1.2.2

mitkerberos_5Match1.2.3

mitkerberos_5Match1.2.4

mitkerberos_5Match1.2.5

mitkerberos_5Match1.2.6

mitkerberos_5Match1.2.7

openafsopenafsMatch1.0

openafsopenafsMatch1.0.1

openafsopenafsMatch1.0.2

openafsopenafsMatch1.0.3

openafsopenafsMatch1.0.4

openafsopenafsMatch1.0.4a

openafsopenafsMatch1.1

openafsopenafsMatch1.1.1

openafsopenafsMatch1.1.1a

openafsopenafsMatch1.2

openafsopenafsMatch1.2.1

openafsopenafsMatch1.2.2

openafsopenafsMatch1.2.2a

openafsopenafsMatch1.2.2b

openafsopenafsMatch1.2.3

openafsopenafsMatch1.2.4

openafsopenafsMatch1.2.5

openafsopenafsMatch1.2.6

openafsopenafsMatch1.3

openafsopenafsMatch1.3.1

openafsopenafsMatch1.3.2

sgiirixMatch6.5

sgiirixMatch6.5.1

sgiirixMatch6.5.2

sgiirixMatch6.5.2f

sgiirixMatch6.5.2m

sgiirixMatch6.5.3

sgiirixMatch6.5.3f

sgiirixMatch6.5.3m

sgiirixMatch6.5.4

sgiirixMatch6.5.4f

sgiirixMatch6.5.4m

sgiirixMatch6.5.5

sgiirixMatch6.5.5f

sgiirixMatch6.5.5m

sgiirixMatch6.5.6

sgiirixMatch6.5.6f

sgiirixMatch6.5.6m

sgiirixMatch6.5.7

sgiirixMatch6.5.7f

sgiirixMatch6.5.7m

sgiirixMatch6.5.8

sgiirixMatch6.5.8f

sgiirixMatch6.5.8m

sgiirixMatch6.5.9

sgiirixMatch6.5.9f

sgiirixMatch6.5.9m

sgiirixMatch6.5.10

sgiirixMatch6.5.10f

sgiirixMatch6.5.10m

sgiirixMatch6.5.11

sgiirixMatch6.5.11f

sgiirixMatch6.5.11m

sgiirixMatch6.5.12

sgiirixMatch6.5.12f

sgiirixMatch6.5.12m

sgiirixMatch6.5.13

sgiirixMatch6.5.13f

sgiirixMatch6.5.13m

sgiirixMatch6.5.14

sgiirixMatch6.5.14f

sgiirixMatch6.5.14m

sgiirixMatch6.5.15

sgiirixMatch6.5.15f

sgiirixMatch6.5.15m

sgiirixMatch6.5.16

sgiirixMatch6.5.16f

sgiirixMatch6.5.16m

sgiirixMatch6.5.17

sgiirixMatch6.5.17f

sgiirixMatch6.5.17m

sgiirixMatch6.5.18

sgiirixMatch6.5.18f

sgiirixMatch6.5.18m

sgiirixMatch6.5.19

sgiirixMatch6.5.20

Node

crayunicosMatch6.0

crayunicosMatch6.0e

crayunicosMatch6.1

crayunicosMatch7.0

crayunicosMatch8.0

crayunicosMatch8.3

crayunicosMatch9.0

crayunicosMatch9.0.2.5

crayunicosMatch9.2

crayunicosMatch9.2.4

freebsdfreebsdMatch4.0

freebsdfreebsdMatch4.1

freebsdfreebsdMatch4.1.1

freebsdfreebsdMatch4.1.1release

freebsdfreebsdMatch4.1.1stable

freebsdfreebsdMatch4.2

freebsdfreebsdMatch4.2stable

freebsdfreebsdMatch4.3

freebsdfreebsdMatch4.3release

freebsdfreebsdMatch4.3stable

freebsdfreebsdMatch4.4

freebsdfreebsdMatch4.4stable

freebsdfreebsdMatch4.5

freebsdfreebsdMatch4.5release

freebsdfreebsdMatch4.5stable

freebsdfreebsdMatch4.6

freebsdfreebsdMatch4.6release

freebsdfreebsdMatch4.6stable

freebsdfreebsdMatch4.6.2

freebsdfreebsdMatch4.7

freebsdfreebsdMatch4.7release

freebsdfreebsdMatch4.7stable

freebsdfreebsdMatch5.0

hphp-uxMatch10.20

hphp-uxMatch10.24

hphp-uxMatch11.00

hphp-uxMatch11.04

hphp-uxMatch11.11

hphp-uxMatch11.20

hphp-uxMatch11.22

hphp-ux_series_700Match10.20

hphp-ux_series_800Match10.20

ibmaixMatch4.3.3

ibmaixMatch5.1

ibmaixMatch5.2

openbsdopenbsdMatch2.0

openbsdopenbsdMatch2.1

openbsdopenbsdMatch2.2

openbsdopenbsdMatch2.3

openbsdopenbsdMatch2.4

openbsdopenbsdMatch2.5

openbsdopenbsdMatch2.6

openbsdopenbsdMatch2.7

openbsdopenbsdMatch2.8

openbsdopenbsdMatch2.9

openbsdopenbsdMatch3.0

openbsdopenbsdMatch3.1

openbsdopenbsdMatch3.2

sunsolarisMatch2.5.1x86

sunsolarisMatch2.6

sunsolarisMatch7.0x86

sunsolarisMatch8.0x86

sunsolarisMatch9.0sparc

sunsolarisMatch9.0x86

sunsunosMatch-

sunsunosMatch5.5.1

sunsunosMatch5.7

sunsunosMatch5.8

References

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-008.txt.asc

archives.neohapsis.com/archives/vulnwatch/2003-q1/0140.html

marc.info/?l=bugtraq&m=104810574423662&w=2

marc.info/?l=bugtraq&m=104811415301340&w=2

marc.info/?l=bugtraq&m=104860855114117&w=2

marc.info/?l=bugtraq&m=104878237121402&w=2

marc.info/?l=bugtraq&m=105362148313082&w=2

www.cert.org/advisories/CA-2003-10.html

www.debian.org/security/2003/dsa-266

www.debian.org/security/2003/dsa-272

www.debian.org/security/2003/dsa-282

www.eeye.com/html/Research/Advisories/AD20030318.html

www.kb.cert.org/vuls/id/516825

www.linuxsecurity.com/advisories/engarde_advisory-3024.html

www.mandriva.com/security/advisories?name=MDKSA-2003:037

www.novell.com/linux/security/advisories/2003_027_glibc.html

www.redhat.com/support/errata/RHSA-2003-051.html

www.redhat.com/support/errata/RHSA-2003-052.html

www.redhat.com/support/errata/RHSA-2003-089.html

www.redhat.com/support/errata/RHSA-2003-091.html

www.securityfocus.com/archive/1/315638/30/25430/threaded

www.securityfocus.com/archive/1/316931/30/25250/threaded

www.securityfocus.com/archive/1/316960/30/25250/threaded

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A230

security.netapp.com/advisory/ntap-20150122-0002/

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

AI Score

Confidence

High

0.968 High

EPSS

Percentile

99.7%

JSON

Related for NVD:CVE-2003-0028

cve2 cvelist2 debiancve2 nessus20 debian15 openvas22 cert2 suse2 osv8 nvd1 securityvulns5 canvas2 redhat1