« Volver al listado

CVE-2003-0212

Estado: ModificadaAlta (7.5)—

handleAccept en rinted anteriores a 0.62 no redimensiona adecuadamente la lista de conexiones cuando se llena y establece un array de índices incorrectamente, lo que permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario mediante un número grande de conexiones.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Rinetd — Rinetd

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2003-0212",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2003-05-12T04:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=105059298502830&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2003/dsa-289",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=105059298502830&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2003/dsa-289",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "handleAccept in rinetd before 0.62 does not properly resize the connection list when it becomes full and sets an array index incorrectly, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of connections."
    },
    {
      "lang": "es",
      "value": "handleAccept en rinted anteriores a 0.62 no redimensiona adecuadamente la lista de conexiones cuando se llena y establece un array de índices incorrectamente, lo que permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario mediante un número grande de conexiones."
    }
  ],
  "lastModified": "2026-06-16T22:01:45.763",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:rinetd:rinetd:0.52:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7CDE63F9-A8D8-4A77-8B14-697937EBC58D"
            },
            {
              "criteria": "cpe:2.3:a:rinetd:rinetd:0.61:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C102543-EED5-44E1-8043-29B38021ED53"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}