CVE-2003-0028 in IRIX

Résumé (Anglaise)

Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Réserver

10/01/2003

Divulgation

25/03/2003

Statut

Confirmé

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
20227	SGI IRIX XDR xdrmem_getbytes Exécution de code à distance	192	Non défini	Non défini	CVE-2003-0028
79	SuSE Linux RPC XDR glibc Exécution de code à distance	192	Preuve de concept	Correctif officiel	CVE-2003-0028

Sources

• MITRE
• NVD
• CVE Details