CVE-2003-0723
published 2003-10-20CVE-2003-0723: Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote attackers to execute arbitrary code.
PriorityP431high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
3.81%
88.7th percentile
Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote attackers to execute arbitrary code.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gkrellm | < gkrellm 2.1.14 (bookworm) | gkrellm 2.1.14 (bookworm) |
| gkrellm | gkrellm | — | — |
| gkrellm | gkrellm | — | — |
| gkrellm | gkrellm | >= 0 < 2.1.14 | 2.1.14 |
| gkrellm | gkrellm | >= 0 < 2.1.14 | 2.1.14 |
| gkrellm | gkrellm | >= 0 < 2.1.14 | 2.1.14 |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2003-0723: gkrellm - Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote att...
vendor_debian·2003·CVSS 7.5
CVE-2003-0723 [HIGH] CVE-2003-0723: gkrellm - Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote att...
Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote attackers to execute arbitrary code.
Scope: local
bookworm: resolved (fixed in 2.1.14)
bullseye: resolved (fixed in 2.1.14)
sid: resolved (fixed in 2.1.14)
trixie: resolved (fixed in 2.1.14)
GHSA
GHSA-wg44-6gfj-xf8p: Buffer overflow in gkrellmd for gkrellm 2
ghsa_unreviewed·2022-04-29
CVE-2003-0723 [HIGH] GHSA-wg44-6gfj-xf8p: Buffer overflow in gkrellmd for gkrellm 2
Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote attackers to execute arbitrary code.
OSV
CVE-2003-0723: Buffer overflow in gkrellmd for gkrellm 2
osv·2003-10-20·CVSS 7.5
CVE-2003-0723 [HIGH] CVE-2003-0723: Buffer overflow in gkrellmd for gkrellm 2
Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote attackers to execute arbitrary code.
No detection rules found.
Exploit-DB
Gkrellmd 2.1 - Remote Buffer Overflow (2)
exploitdb·2003-06-24
CVE-2003-0723 Gkrellmd 2.1 - Remote Buffer Overflow (2)
Gkrellmd 2.1 - Remote Buffer Overflow (2)
---
source: https://www.securityfocus.com/bid/8022/info
GKrellMd has been reported prone to a remote buffer overflow vulnerability, arbitrary code execution is possible.
The issue presents itself due to a lack of sufficient bounds checking performed on network-based data. If data exceeding the maximum reserved memory buffer size is received arbitrary memory may be corrupted.
A remote attacker may ultimately exploit this issue remotely to seize control of the affected daemon and execute arbitrary code.
This vulnerability has been reported to affect Gkrellm 2.1.13.
#!/usr/bin/perl -s
# kokaninATdtors.net playing with gkrellmd on FreeBSD 4.8-RELEASE
# advisory on http://packetstormsecurity.nl/0306-exploits/gkrellmd
# I just ripped their code an
Exploit-DB
Gkrellmd 2.1 - Remote Buffer Overflow (1)
exploitdb·2003-06-24
CVE-2003-0723 Gkrellmd 2.1 - Remote Buffer Overflow (1)
Gkrellmd 2.1 - Remote Buffer Overflow (1)
---
source: https://www.securityfocus.com/bid/8022/info
GKrellMd has been reported prone to a remote buffer overflow vulnerability, arbitrary code execution is possible.
The issue presents itself due to a lack of sufficient bounds checking performed on network-based data. If data exceeding the maximum reserved memory buffer size is received arbitrary memory may be corrupted.
A remote attacker may ultimately exploit this issue remotely to seize control of the affected daemon and execute arbitrary code.
This vulnerability has been reported to affect Gkrellm 2.1.13.
#!/usr/bin/perl -s
use IO::Socket;
#
# proof of concept code
# tested: grkellmd 2.1.10
#
if(!$ARGV[0] || !$ARGV[1])
{ print "usage: ./gkrellmcrash.pl \n"; exit(-1); }
$host = $AR
No writeups or analysis indexed.
2003-10-20
Published