CVE-2003-0849

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction function when using a buffer provided by the BusyWithConnection function.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Nov 17, 2003
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2003

CVE-2003-08507.5The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary CVE-2003-08515.0OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.CVE-2003-08525.0Format string vulnerability in send_message.c for Sylpheed-claws 0.9.4 through 0.9.6 allows remote SMTP servers to cause a denial of serviceCVE-2003-08535.0An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary codCVE-2003-08542.1ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotelyCVE-2003-08557.8Pan 0.13.3 and earlier allows remote attackers to cause a denial of service (crash) via a news post with a long author email address.CVE-2003-08564.9iproute 2.4.7 and earlier allows local users to cause a denial of service via spoofed messages as other users to the kernel netlink interfacCVE-2003-08574.6The (1) ipq_read and (2) ipulog_read functions in iptables allow local users to cause a denial of service by sending spoofed messages as othCVE-2003-08582.1Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users CVE-2003-08594.9The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages asCVE-2003-086010.0Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors.CVE-2003-086110.0Integer overflows in (1) base64_encode and (2) the GD library for PHP before 4.3.3 have unknown impact and unknown attack vectors.
CVE-2003-0849: High severity, CVSS 7.5 | Vulnix