VULNERABILITY INTELLIGENCE

CVE-2003-0516

CVSS score7.5 HIGH

EPSS probability1.90%

CISA KEVNot currently listed

Published2003-08-18

Last modified2026-06-16

CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in (1) caller ID or (2) caller name strings.