CVE-2003-0028

CVSS 7.5 - HIGH

Description

Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.

Affected Products

50 of 165

Vendor	Product	Version
gnu	glibc	`2.1`
gnu	glibc	`2.1.1`
gnu	glibc	`2.1.2`
gnu	glibc	`2.1.3`
gnu	glibc	`2.2`
gnu	glibc	`2.2.1`
gnu	glibc	`2.2.2`
gnu	glibc	`2.2.3`
gnu	glibc	`2.2.4`
gnu	glibc	`2.2.5`
gnu	glibc	`2.3`
gnu	glibc	`2.3.1`
gnu	glibc	`2.3.2`
mit	kerberos_5	`1.2`
mit	kerberos_5	`1.2.1`
mit	kerberos_5	`1.2.2`
mit	kerberos_5	`1.2.3`
mit	kerberos_5	`1.2.4`
mit	kerberos_5	`1.2.5`
mit	kerberos_5	`1.2.6`
mit	kerberos_5	`1.2.7`
openafs	openafs	`1.0`
openafs	openafs	`1.0.1`
openafs	openafs	`1.0.2`
openafs	openafs	`1.0.3`
openafs	openafs	`1.0.4`
openafs	openafs	`1.0.4a`
openafs	openafs	`1.1`
openafs	openafs	`1.1.1`
openafs	openafs	`1.1.1a`
openafs	openafs	`1.2`
openafs	openafs	`1.2.1`
openafs	openafs	`1.2.2`
openafs	openafs	`1.2.2a`
openafs	openafs	`1.2.2b`
openafs	openafs	`1.2.3`
openafs	openafs	`1.2.4`
openafs	openafs	`1.2.5`
openafs	openafs	`1.2.6`
openafs	openafs	`1.3`
openafs	openafs	`1.3.1`
openafs	openafs	`1.3.2`
sgi	irix	`6.5`
sgi	irix	`6.5.1`
sgi	irix	`6.5.2`
sgi	irix	`6.5.2f`
sgi	irix	`6.5.2m`
sgi	irix	`6.5.3`
sgi	irix	`6.5.3f`
sgi	irix	`6.5.3m`