CVEvulnerability

CVE-2003-0028

7.5 HIGH Published 2003-03-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-03-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.

Affected configurations

• gnu glibc 2.1 • gnu glibc 2.1.1 • gnu glibc 2.1.2 • gnu glibc 2.1.3 • gnu glibc 2.2 • gnu glibc 2.2.1 • gnu glibc 2.2.2 • gnu glibc 2.2.3 • gnu glibc 2.2.4 • gnu glibc 2.2.5 • gnu glibc 2.3 • gnu glibc 2.3.1 • gnu glibc 2.3.2 • mit kerberos 5 1.2 • mit kerberos 5 1.2.1 • mit kerberos 5 1.2.2 • mit kerberos 5 1.2.3 • mit kerberos 5 1.2.4 • mit kerberos 5 1.2.5 • mit kerberos 5 1.2.6 • mit kerberos 5 1.2.7 • openafs openafs 1.0 • openafs openafs 1.0.1 • openafs openafs 1.0.2 • openafs openafs 1.0.3 • openafs openafs 1.0.4 • openafs openafs 1.0.4a • openafs openafs 1.1 • openafs openafs 1.1.1 • openafs openafs 1.1.1a • openafs openafs 1.2 • openafs openafs 1.2.1 • openafs openafs 1.2.2 • openafs openafs 1.2.2a • openafs openafs 1.2.2b • openafs openafs 1.2.3 • openafs openafs 1.2.4 • openafs openafs 1.2.5 • openafs openafs 1.2.6 • openafs openafs 1.3 • openafs openafs 1.3.1 • openafs openafs 1.3.2 • sgi irix 6.5 • sgi irix 6.5.1 • sgi irix 6.5.2 • sgi irix 6.5.2f • sgi irix 6.5.2m • sgi irix 6.5.3 • sgi irix 6.5.3f • sgi irix 6.5.3m • sgi irix 6.5.4 • sgi irix 6.5.4f • sgi irix 6.5.4m • sgi irix 6.5.5 • sgi irix 6.5.5f • sgi irix 6.5.5m • sgi irix 6.5.6 • sgi irix 6.5.6f • sgi irix 6.5.6m • sgi irix 6.5.7 … and 92 more

References