QwikSec

Security Database

CVE

CWE

Training

CVE-2003-0849

Published: Oct 9, 2003

Modified: Aug 8, 2024

PUBLISHED

Description

Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction function when using a buffer provided by the BusyWithConnection function.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20030925 Cfengine2 cfservd remote stack overflow

mailing-list

x_refsource_BUGTRAQ

20030928 cfengine2-2.0.3 remote exploit for redhat

mailing-list

x_refsource_BUGTRAQ

20031005 GLSA: cfengine (200310-02)

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.