CVE-2003-0380

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in atftp daemon (atftpd) 0.6.1 and earlier, and possibly later versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2003-06/0056.htmlExploit, Patch, Vendor Advisory
http://www.debian.org/security/2003/dsa-314Patch, Vendor Advisory
http://www.securityfocus.com/archive/82/323886/2003-06-02/2003-06-08/0Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2003-06/0056.htmlExploit, Patch, Vendor Advisory
http://www.debian.org/security/2003/dsa-314Patch, Vendor Advisory
http://www.securityfocus.com/archive/82/323886/2003-06-02/2003-06-08/0Vendor Advisory

Timeline

Published: Jul 2, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-03812.1Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files CVE-2003-03824.6Buffer overflow in Eterm 0.9.2 allows local users to gain privileges via a long ETERMPATH environment variable.CVE-2003-03857.2Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option.CVE-2003-03867.5OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attack CVE-2003-03884.6pam_wheel in Linux-PAM 0.78, with the trust option enabled and the use_uid option disabled, allows local users to spoof log entries and gain CVE-2003-03894.3Cross-site scripting (XSS) vulnerability in the secure redirect function of RSA ACE/Agent 5.0 for Windows, and 5.x for Web, allows remote at CVE-2003-03904.6Multiple buffer overflows in Options Parsing Tool (OPT) shared library 3.18 and earlier, when used in setuid programs, may allow local users CVE-2003-03917.5Format string vulnerability in Magic WinMail Server 2.3, and possibly other 2.x versions, allows remote attackers to cause a denial of servi CVE-2003-03926.4Directory traversal vulnerability in ST FTP Service 3.0 allows remote attackers to list arbitrary directories via a CD command with a DoS dr CVE-2003-03935.0Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Internet Traffic" modes, w CVE-2003-03947.5objects.inc.php4 in BLNews 2.1.3 allows remote attackers to execute arbitrary PHP code via a Server[path] parameter that points to malicious CVE-2003-03957.5Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request con