CVE-2003-0849
Estado: ModificadaAlta (7.5)—
Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction function when using a buffer provided by the BusyWithConnection function.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 11%
- Percentil entre todas las CVEs puntuadas: 96
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-Other
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2003-0849",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2003-11-17T05:00:00.000",
"references": [
{
"url": "http://marc.info/?l=bugtraq&m=106451047819552&w=2",
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=bugtraq&m=106485375218280&w=2",
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=bugtraq&m=106546086216984&w=2",
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=bugtraq&m=106451047819552&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=bugtraq&m=106485375218280&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=bugtraq&m=106546086216984&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction function when using a buffer provided by the BusyWithConnection function."
},
{
"lang": "es",
"value": "Desbordamiento de búfer en net.c de cfengine 2.x a 2.0.8 permite a atacantes remotos ejecutar código arbitrario mediante ciertos paquetes con valores de longitud modificados, del cual se fia la función ReceiveTransaction cuando usa un bufer provisto por la función BusyWithConnection."
}
],
"lastModified": "2026-06-16T22:03:04.627",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gnu:cfengine:2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E712F24-407C-451F-9DB4-09579B50F85B"
},
{
"criteria": "cpe:2.3:a:gnu:cfengine:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3AE934D-08E5-42C7-B4C1-C9B0C8881B3E"
},
{
"criteria": "cpe:2.3:a:gnu:cfengine:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD09E7B0-CA9F-49FC-BB8B-54CDB3230C98"
},
{
"criteria": "cpe:2.3:a:gnu:cfengine:2.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC2CD9C4-C206-4C43-B519-6E791187E2DE"
},
{
"criteria": "cpe:2.3:a:gnu:cfengine:2.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D38FC40B-AC0A-4DD6-9964-3E8D57EC5F19"
},
{
"criteria": "cpe:2.3:a:gnu:cfengine:2.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B4445F7-307B-4653-A0E4-0AE513218980"
},
{
"criteria": "cpe:2.3:a:gnu:cfengine:2.0.5:b1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4EC7DFB-CBB8-457F-94A0-1DBB833F5F71"
},
{
"criteria": "cpe:2.3:a:gnu:cfengine:2.0.5:pre:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B6729F6-B94B-4897-BEF5-C3A10A18D085"
},
{
"criteria": "cpe:2.3:a:gnu:cfengine:2.0.5:pre2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CF801CA-BED6-43CA-8EA1-522365F2AA57"
},
{
"criteria": "cpe:2.3:a:gnu:cfengine:2.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "455F26C8-CFDD-4C9C-8482-8D53614B1143"
},
{
"criteria": "cpe:2.3:a:gnu:cfengine:2.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61A3C108-D79A-4465-8F4D-317AD84098AA"
},
{
"criteria": "cpe:2.3:a:gnu:cfengine:2.0.7:p1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D21D57EA-DF58-429B-9FBE-F0080085B62E"
},
{
"criteria": "cpe:2.3:a:gnu:cfengine:2.0.7:p2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E622AEA-F5B4-4BA3-B9F0-2E7C4D121411"
},
{
"criteria": "cpe:2.3:a:gnu:cfengine:2.0.7:p3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D23A118C-59A6-44AB-A772-ED0037C95B53"
},
{
"criteria": "cpe:2.3:a:gnu:cfengine:2.1.0:a6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9CD529EF-93DF-441E-968B-32BAF48A9913"
},
{
"criteria": "cpe:2.3:a:gnu:cfengine:2.1.0:a8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9BAB0408-08BD-4DCE-BA56-C60AD845E705"
},
{
"criteria": "cpe:2.3:a:gnu:cfengine:2.1.0:a9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F78851E3-1E2B-45DB-8B4A-F8E1BDE2E057"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}