NetSight
IP …
high7.5

CVE-2003-0028

Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, includin…

Impact

Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.

Affected products

VendorProductAffected versions
GnuGlibc
Versions 2.1, 2.1.1, 2.1.2, 2.1.3, 2.2, 2.2.1
MitKerberos 5
Versions 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5
OpenafsOpenafs
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.4a
SgiIrix
Versions 6.5, 6.5.1, 6.5.2, 6.5.2f, 6.5.2m, 6.5.3
CrayUnicos
Versions 6.0, 6.0e, 6.1, 7.0, 8.0, 8.3
FreebsdFreebsd
Versions 4.0, 4.1, 4.1.1, 4.2, 4.3, 4.4
HpHp-Ux
Versions 10.20, 10.24, 11.00, 11.04, 11.11, 11.20
HpHp-Ux Series 700
Version 10.20
HpHp-Ux Series 800
Version 10.20
IbmAix
Versions 4.3.3, 5.1, 5.2
OpenbsdOpenbsd
Versions 2.0, 2.1, 2.2, 2.3, 2.4, 2.5
SunSolaris
Versions 2.5.1, 2.6, 7.0, 8.0, 9.0

References