Evil-DB LogoEvil-DB
← All CVEs

CVE-2003-0849

high · 7.5

Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction function when using a buffer provided by the BusyWithConnection function.

7.5
CVSS
10.9%
EPSS (exploit prob.)
96th
EPSS percentile
2003-11-17
Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

VendorProductAffected versions
gnucfengine2.0.0
gnucfengine2.0.1
gnucfengine2.0.2
gnucfengine2.0.3
gnucfengine2.0.4
gnucfengine2.0.5
gnucfengine2.0.5
gnucfengine2.0.5
gnucfengine2.0.5
gnucfengine2.0.6
gnucfengine2.0.7
gnucfengine2.0.7
gnucfengine2.0.7
gnucfengine2.0.7
gnucfengine2.1.0
gnucfengine2.1.0
gnucfengine2.1.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0849