CVE-2003-0805

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-10-06 · updated 2026-06-16

Description

Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long filename as a result of a LIST command, and (2) the GSisText function, which calculates the view-type.

Affected products

University Of Minnesota Gopherd: 2.0.3, 2.0.4, 2.3, 2.3.1, 3.0.0, 3.0.1 (+4)

References

http://marc.info/?l=bugtraq&m=105804485302211&w=2
http://marc.info/?l=bugtraq&m=106123498310717&w=2
http://www.debian.org/security/2003/dsa-387
http://marc.info/?l=bugtraq&m=105804485302211&w=2
http://marc.info/?l=bugtraq&m=106123498310717&w=2
http://www.debian.org/security/2003/dsa-387

Get alerted when CVE-2003-0805 or the next vulnerability affects your stack