CVE-2003-0685 Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response.
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netris | = 0.3 | No fix listed |
| netris | = 0.4 | No fix listed |
| netris | = 0.5 | No fix listed |
| debian/netris(Debian:12) | < 0.52-1 | 0.52-1 |
| debian/netris(Debian:14) | < 0.52-1 | 0.52-1 |
| debian/netris(Debian:14) | = 0.4-3 | No fix listed |
| debian/netris(Debian:14) | = 0.5-2 | No fix listed |
| debian/netris(Debian:14) | = 0.5-2.0.1 | No fix listed |
| debian/netris(Debian:14) | = 0.5-4woody1 | No fix listed |
References
- 20030812 Netris client Buffer Overflow Vulnerability. mailing-list
- DSA-372 exploit vendor-advisory
- Debian Security Tracker CVE-2003-0685 vendor-advisory