CVE-2003-0028

N/A Unknown

Published: March 25, 2003 Modified: April 16, 2026

Description

Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-008.txt.asc

Source: cve@mitre.org

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0140.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104810574423662&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104811415301340&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104860855114117&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104878237121402&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=105362148313082&w=2

Source: cve@mitre.org

http://www.cert.org/advisories/CA-2003-10.html

Source: cve@mitre.org

Patch Third Party Advisory US Government Resource

http://www.debian.org/security/2003/dsa-266

Source: cve@mitre.org

http://www.debian.org/security/2003/dsa-272

Source: cve@mitre.org

http://www.debian.org/security/2003/dsa-282

Source: cve@mitre.org

http://www.eeye.com/html/Research/Advisories/AD20030318.html

Source: cve@mitre.org

Exploit Vendor Advisory

http://www.kb.cert.org/vuls/id/516825

Source: cve@mitre.org

US Government Resource

http://www.linuxsecurity.com/advisories/engarde_advisory-3024.html

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2003:037

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2003_027_glibc.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-051.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-052.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-089.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-091.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/315638/30/25430/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/316931/30/25250/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/316960/30/25250/threaded

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A230

Source: cve@mitre.org

https://security.netapp.com/advisory/ntap-20150122-0002/

Source: cve@mitre.org

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-008.txt.asc