CVE-2003-0028

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 15.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-03-25 · updated 2026-06-16

Description

Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.

Affected products

Cray Unicos: 6.0, 6.0e, 6.1, 7.0, 8.0, 8.3 (+4)
FreeBSD: 4.0, 4.1, 4.1.1, 4.1.1-release, 4.1.1-stable, 4.2 (+17)
GNU C Library (glibc): 2.1, 2.1.1, 2.1.2, 2.1.3, 2.2, 2.2.1 (+7)
Hewlett Packard Enterprise (HPE) HP-UX: 10.20, 10.24, 11.00, 11.04, 11.11, 11.20 (+1)
Hp-Ux Series 700: 10.20
Hp-Ux Series 800: 10.20
IBM AIX: 4.3.3, 5.1, 5.2
MIT Kerberos 5: 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5 (+2)
The OpenAFS Foundation OpenAFS: 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.4a (+15)
OpenBSD: 2.0, 2.1, 2.2, 2.3, 2.4, 2.5 (+7)
Sgi Irix: 6.5, 6.5.1, 6.5.2, 6.5.2f, 6.5.2m, 6.5.3 (+49)
Sun Solaris: 2.5.1, 2.6, 7.0, 8.0, 9.0
Sunos: 5.5.1, 5.7, 5.8

References

Get alerted when CVE-2003-0028 or the next vulnerability affects your stack