CVE-2003-0849

None

CVSS

—

EPSS

10.9%

Published

Nov 17, 2003

CISA due date

—

The record

Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction function when using a buffer provided by the BusyWithConnection function.

Affected packages

Ecosystem	Package	Introduced	Fixed