VULNERABILITY INTELLIGENCE
CVE-2003-0849
CVSS score7.5 HIGH
EPSS probability10.90%
CISA KEVNot currently listed
Published2003-11-17
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction function when using a buffer provided by the BusyWithConnection function.