CVE-2003-0849 Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction fun...
HighCVSS 7.5
EPSS 10.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction function when using a buffer provided by the BusyWithConnection function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU cfengine | = 2.0.0 | No fix listed |
| GNU cfengine | = 2.0.1 | No fix listed |
| GNU cfengine | = 2.0.2 | No fix listed |
| GNU cfengine | = 2.0.3 | No fix listed |
| GNU cfengine | = 2.0.4 | No fix listed |
| GNU cfengine | = 2.0.5 | No fix listed |
| GNU cfengine | = 2.0.5-b1 | No fix listed |
| GNU cfengine | = 2.0.5-pre | No fix listed |
| GNU cfengine | = 2.0.5-pre2 | No fix listed |
| GNU cfengine | = 2.0.6 | No fix listed |
| GNU cfengine | = 2.0.7 | No fix listed |
| GNU cfengine | = 2.0.7-p1 | No fix listed |
| GNU cfengine | = 2.0.7-p2 | No fix listed |
| GNU cfengine | = 2.0.7-p3 | No fix listed |
| GNU cfengine | = 2.1.0-a6 | No fix listed |
| GNU cfengine | = 2.1.0-a8 | No fix listed |
| GNU cfengine | = 2.1.0-a9 | No fix listed |
References
- 20030925 Cfengine2 cfservd remote stack overflow mailing-list
- 20030928 cfengine2-2.0.3 remote exploit for redhat mailing-list
- 20031005 GLSA: cfengine (200310-02) mailing-list