CVE-2003-0212

handleAccept in rinetd before 0.62 does not properly resize the connection list when it becomes full and sets an array index incorrectly, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of connections.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-05-12

Last modified

2024-08-08

Affected products

• Rinetd (Rinetd)

References

• http://marc.info/?l=bugtraq&m=105059298502830&w=2
• http://www.debian.org/security/2003/dsa-289