CVE-2003-0028

Published: Mar 25, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.

Affected (165)

Products: Gnu: Glibc · Mit: Kerberos 5 · Openafs: Openafs · +7 more

Show all products

Gnu: Glibc · Mit: Kerberos 5 · Openafs: Openafs · Sgi: Irix · Cray: Unicos · Freebsd: Freebsd · Hp: Hp Ux, Hp Ux Series 700, Hp Ux Series 800 · Ibm: Aix · Openbsd: Openbsd · Sun: Solaris, Sunos

1 product

1 product

1 product

1 product

1 product

1 product

3 products

1 product

1 product

2 products

Configuration A

97 vulnerable

Vulnerable Software	Affected Versions
Gnu Glibc	Version 2.1.1
Gnu Glibc	Version 2.1.2
Gnu Glibc	Version 2.1.3
Gnu Glibc	Version 2.1
Gnu Glibc	Version 2.2.1
Gnu Glibc	Version 2.2.2
Gnu Glibc	Version 2.2.3
Gnu Glibc	Version 2.2.4
Gnu Glibc	Version 2.2.5
Gnu Glibc	Version 2.2
Gnu Glibc	Version 2.3.1
Gnu Glibc	Version 2.3.2
Gnu Glibc	Version 2.3
Mit Kerberos 5	Version 1.2.1
Mit Kerberos 5	Version 1.2.2
Mit Kerberos 5	Version 1.2.3
Mit Kerberos 5	Version 1.2.4
Mit Kerberos 5	Version 1.2.5
Mit Kerberos 5	Version 1.2.6
Mit Kerberos 5	Version 1.2.7
Mit Kerberos 5	Version 1.2
Openafs Openafs	Version 1.0.1
Openafs Openafs	Version 1.0.2
Openafs Openafs	Version 1.0.3
Openafs Openafs	Version 1.0.4
Openafs Openafs	Version 1.0.4a
Openafs Openafs	Version 1.0
Openafs Openafs	Version 1.1.1
Openafs Openafs	Version 1.1.1a
Openafs Openafs	Version 1.1
Openafs Openafs	Version 1.2.1
Openafs Openafs	Version 1.2.2
Openafs Openafs	Version 1.2.2a
Openafs Openafs	Version 1.2.2b
Openafs Openafs	Version 1.2.3
Openafs Openafs	Version 1.2.4
Openafs Openafs	Version 1.2.5
Openafs Openafs	Version 1.2.6
Openafs Openafs	Version 1.2
Openafs Openafs	Version 1.3.1
Openafs Openafs	Version 1.3.2
Openafs Openafs	Version 1.3
Sgi Irix	Version 6.5.10
Sgi Irix	Version 6.5.10f
Sgi Irix	Version 6.5.10m
Sgi Irix	Version 6.5.11
Sgi Irix	Version 6.5.11f
Sgi Irix	Version 6.5.11m
Sgi Irix	Version 6.5.12
Sgi Irix	Version 6.5.12f
Sgi Irix	Version 6.5.12m
Sgi Irix	Version 6.5.13
Sgi Irix	Version 6.5.13f
Sgi Irix	Version 6.5.13m
Sgi Irix	Version 6.5.14
Sgi Irix	Version 6.5.14f
Sgi Irix	Version 6.5.14m
Sgi Irix	Version 6.5.15
Sgi Irix	Version 6.5.15f
Sgi Irix	Version 6.5.15m
Sgi Irix	Version 6.5.16
Sgi Irix	Version 6.5.16f
Sgi Irix	Version 6.5.16m
Sgi Irix	Version 6.5.17
Sgi Irix	Version 6.5.17f
Sgi Irix	Version 6.5.17m
Sgi Irix	Version 6.5.18
Sgi Irix	Version 6.5.18f
Sgi Irix	Version 6.5.18m
Sgi Irix	Version 6.5.19
Sgi Irix	Version 6.5.1
Sgi Irix	Version 6.5.20
Sgi Irix	Version 6.5.2
Sgi Irix	Version 6.5.2f
Sgi Irix	Version 6.5.2m
Sgi Irix	Version 6.5.3
Sgi Irix	Version 6.5.3f
Sgi Irix	Version 6.5.3m
Sgi Irix	Version 6.5.4
Sgi Irix	Version 6.5.4f
Sgi Irix	Version 6.5.4m
Sgi Irix	Version 6.5.5
Sgi Irix	Version 6.5.5f
Sgi Irix	Version 6.5.5m
Sgi Irix	Version 6.5.6
Sgi Irix	Version 6.5.6f
Sgi Irix	Version 6.5.6m
Sgi Irix	Version 6.5.7
Sgi Irix	Version 6.5.7f
Sgi Irix	Version 6.5.7m
Sgi Irix	Version 6.5.8
Sgi Irix	Version 6.5.8f
Sgi Irix	Version 6.5.8m
Sgi Irix	Version 6.5.9
Sgi Irix	Version 6.5.9f
Sgi Irix	Version 6.5.9m
Sgi Irix	Version 6.5

Configuration B

68 vulnerable

Vulnerable Software	Affected Versions
Cray Unicos	Version 6.0
Cray Unicos	Version 6.0e
Cray Unicos	Version 6.1
Cray Unicos	Version 7.0
Cray Unicos	Version 8.0
Cray Unicos	Version 8.3
Cray Unicos	Version 9.0.2.5
Cray Unicos	Version 9.0
Cray Unicos	Version 9.2.4
Cray Unicos	Version 9.2
Freebsd Freebsd	Version 4.0
Freebsd Freebsd	Version 4.1.1
Freebsd Freebsd	Version 4.1.1 release
Freebsd Freebsd	Version 4.1.1 stable
Freebsd Freebsd	Version 4.1
Freebsd Freebsd	Version 4.2
Freebsd Freebsd	Version 4.2 stable
Freebsd Freebsd	Version 4.3
Freebsd Freebsd	Version 4.3 release
Freebsd Freebsd	Version 4.3 stable
Freebsd Freebsd	Version 4.4
Freebsd Freebsd	Version 4.4 stable
Freebsd Freebsd	Version 4.5
Freebsd Freebsd	Version 4.5 release
Freebsd Freebsd	Version 4.5 stable
Freebsd Freebsd	Version 4.6.2
Freebsd Freebsd	Version 4.6
Freebsd Freebsd	Version 4.6 release
Freebsd Freebsd	Version 4.6 stable
Freebsd Freebsd	Version 4.7
Freebsd Freebsd	Version 4.7 release
Freebsd Freebsd	Version 4.7 stable
Freebsd Freebsd	Version 5.0
Hp Hp Ux	Version 10.20
Hp Hp Ux	Version 10.24
Hp Hp Ux	Version 11.00
Hp Hp Ux	Version 11.04
Hp Hp Ux	Version 11.11
Hp Hp Ux	Version 11.20
Hp Hp Ux	Version 11.22
Hp Hp Ux Series 700	Version 10.20
Hp Hp Ux Series 800	Version 10.20
Ibm Aix	Version 4.3.3
Ibm Aix	Version 5.1
Ibm Aix	Version 5.2
Openbsd Openbsd	Version 2.0
Openbsd Openbsd	Version 2.1
Openbsd Openbsd	Version 2.2
Openbsd Openbsd	Version 2.3
Openbsd Openbsd	Version 2.4
Openbsd Openbsd	Version 2.5
Openbsd Openbsd	Version 2.6
Openbsd Openbsd	Version 2.7
Openbsd Openbsd	Version 2.8
Openbsd Openbsd	Version 2.9
Openbsd Openbsd	Version 3.0
Openbsd Openbsd	Version 3.1
Openbsd Openbsd	Version 3.2
Sun Solaris	Version 2.5.1
Sun Solaris	Version 2.6
Sun Solaris	Version 7.0
Sun Solaris	Version 8.0
Sun Solaris	Version 9.0
Sun Solaris	Version 9.0
Sun Sunos	All versions
Sun Sunos	Version 5.5.1
Sun Sunos	Version 5.7
Sun Sunos	Version 5.8

References (50)

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-008.txt.asc (unsafe URL)

Source: cve@mitre.org

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0140.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104810574423662&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104811415301340&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104860855114117&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104878237121402&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=105362148313082&w=2

Source: cve@mitre.org

http://www.cert.org/advisories/CA-2003-10.html

Source: cve@mitre.org

PatchThird Party AdvisoryUS Government Resource

http://www.debian.org/security/2003/dsa-266

Source: cve@mitre.org

http://www.debian.org/security/2003/dsa-272

Source: cve@mitre.org

http://www.debian.org/security/2003/dsa-282

Source: cve@mitre.org

http://www.eeye.com/html/Research/Advisories/AD20030318.html

Source: cve@mitre.org

ExploitVendor Advisory

http://www.kb.cert.org/vuls/id/516825

Source: cve@mitre.org

US Government Resource

http://www.linuxsecurity.com/advisories/engarde_advisory-3024.html

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2003:037

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2003_027_glibc.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-051.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-052.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-089.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-091.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/315638/30/25430/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/316931/30/25250/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/316960/30/25250/threaded

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A230

Source: cve@mitre.org

https://security.netapp.com/advisory/ntap-20150122-0002/

Source: cve@mitre.org

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-008.txt.asc (unsafe URL)