NVD

Id
73176  
Name
CVE-2003-0028  
Description
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2003-03-25  
Modified Date
2016-10-17  
Seq
2003-0028  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
376678 73176 CVE-2003-0028 NetBSD-SA2003-008  View
376679 73176 CVE-2003-0028 20030319 EEYE: XDR Integer Overflow  View
376680 73176 CVE-2003-0028 20030319 EEYE: XDR Integer Overflow  View
376681 73176 CVE-2003-0028 20030319 MITKRB5-SA-2003-003: faulty length checks in xdrmem_getbytes  View
376682 73176 CVE-2003-0028 20030325 GLSA: glibc (200303-22)  View
376683 73176 CVE-2003-0028 2003-0014  View
376684 73176 CVE-2003-0028 20030522 [slackware-security] glibc XDR overflow fix (SSA:2003-141-03)  View
376685 73176 CVE-2003-0028 oval:org.mitre.oval:def:230  View
376686 73176 CVE-2003-0028 CA-2003-10  View
376687 73176 CVE-2003-0028 DSA-266  View
376688 73176 CVE-2003-0028 DSA-272  View
376689 73176 CVE-2003-0028 DSA-282  View
376690 73176 CVE-2003-0028 AD20030318  View
376691 73176 CVE-2003-0028 VU#516825  View
376692 73176 CVE-2003-0028 ESA-20030321-010  View
376693 73176 CVE-2003-0028 MDKSA-2003:037  View
376694 73176 CVE-2003-0028 SuSE-SA:2003:027  View
376695 73176 CVE-2003-0028 RHSA-2003:051  View
376696 73176 CVE-2003-0028 RHSA-2003:052  View
376697 73176 CVE-2003-0028 RHSA-2003:089  View
376698 73176 CVE-2003-0028 RHSA-2003:091  View
376699 73176 CVE-2003-0028 20030319 RE: EEYE: XDR Integer Overflow  View
376700 73176 CVE-2003-0028 20030331 GLSA: dietlibc (200303-29)  View
376701 73176 CVE-2003-0028 20030331 GLSA: krb5 & mit-krb5 (200303-28)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63352 JVNDB-2003-000078 Sun RPC XDR ライブラリの xdrmem_getbytes() 関数における整数オーバーフローの脆弱性 Sun RPC のライブラリである、XDR (External Data Representation)の xdrmem_getbytes() 関数には、整数桁あふれによるオーバーフローの脆弱性が存在します。 CVE-2003-0028 6856 CVE-2003-0028 73176 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000078.html 2003-03-16 2007-04-01 View