CVE-2003-0028 Integer overflow in n/a
Remote attackers can execute arbitrary code via integer overflows in XDR library length fields, affecting systems using SunRPC-derived libraries.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2003-0028?
CVE-2003-0028 is a high-severity vulnerability in Freebsd Freebsd, published on 21 Mar 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
Which versions are affected by CVE-2003-0028?
It affects 13 products.
Products include Cray Unicos, Freebsd Freebsd, Gnu Glibc, Hp Hp-Ux, Hp Hp-Ux Series 700, Hp Hp-Ux Series 800 and 7 more.
How do I fix CVE-2003-0028?
Apply the vendor's patch.
Is CVE-2003-0028 being exploited?
There is no known exploitation of CVE-2003-0028 in the wild and no public exploit code.
Other vulnerabilities in Freebsd Freebsd
Sources
Also known as DEBIAN-CVE-2003-0028, DSA-272, DSA-282, GHSA-235q-hvh2-g375.