CVE-2003-0955: Buffer Overflow

Published Nov 21, 2003

Updated

OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code in 3.4 via a program with an invalid header that is not properly handled by (1) ibcs2exec.c in the iBCS2 emulation (compatibcs2) or (2) execelf.c, which leads to a stack-based buffer overflow.

Affected Software

2 affected components

OpenBSD OpenBSD=3.3

OpenBSD OpenBSD=3.4

Remediation

Patch Available

ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/005_exec.patch

Event History

Nov 21, 2003

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Dec 15, 2003

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2003-0955?

CVE-2003-0955 is classified as a high severity vulnerability due to its potential to cause a denial of service and execute arbitrary code.

How do I fix CVE-2003-0955?

To mitigate CVE-2003-0955, upgrade to OpenBSD versions later than 3.4 that address this vulnerability.

Who is affected by CVE-2003-0955?

CVE-2003-0955 affects local users on systems running OpenBSD versions 3.3 and 3.4.

What types of attacks can exploit CVE-2003-0955?

CVE-2003-0955 can be exploited through crafted programs with invalid headers that lead to kernel panics.

What are the consequences of CVE-2003-0955?

The consequences of CVE-2003-0955 can include a system crash or the execution of arbitrary code on vulnerable OpenBSD systems.