CVE-2003-0689: Buffer Overflow

Published Sep 3, 2003

Updated

The getgrouplist function in GNU libc (glibc) 2.2.4 and earlier allows attackers to cause a denial of service (segmentation fault) and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow.

Affected Software

6 affected components

redhat Enterprise Linux=2.1

Remediation

Patch Available

http://www.redhat.com/support/errata/RHSA-2003-249.html

Event History

Sep 3, 2003

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Oct 20, 2003

Data Sourced

via NVD·04:00 AM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2003-0689?

CVE-2003-0689 has a high severity level due to its potential to cause denial of service and arbitrary code execution.

How do I fix CVE-2003-0689?

To fix CVE-2003-0689, upgrade to a patched version of GNU libc that addresses this vulnerability.

What systems are affected by CVE-2003-0689?

CVE-2003-0689 affects Red Hat Enterprise Linux 2.1, including its advanced server and workstation variants.

What type of vulnerability is CVE-2003-0689?

CVE-2003-0689 is a buffer overflow vulnerability that can lead to segmentation faults and potential code execution.

Can CVE-2003-0689 be exploited remotely?

Yes, CVE-2003-0689 can potentially be exploited remotely, allowing attackers to trigger the vulnerability by inducing users to enter environments with misconfigured group memberships.