CVE-2003-0212 handleAccept in rinetd before 0.62 does not properly resize the connection list when it becomes full and sets an array index incorrectly, which allows remote attackers to cause a denial of service and...
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
handleAccept in rinetd before 0.62 does not properly resize the connection list when it becomes full and sets an array index incorrectly, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of connections.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rinetd | = 0.52 | No fix listed |
| rinetd | = 0.61 | No fix listed |
| debian/rinetd(Debian:12) | < 0.61-2 | 0.61-2 |
| debian/rinetd(Debian:13) | < 0.61-2 | 0.61-2 |
| debian/rinetd(Debian:14) | < 0.61-2 | 0.61-2 |
References
- 20030417 Vulnerability in rinetd mailing-list
- DSA-289 patch vendor-advisory
- Debian Security Tracker CVE-2003-0212 vendor-advisory