CVE-2003-0028

CVE-2003-0028 describes an integer overflow vulnerability in the xdrmem_getbytes() function, and potentially other functions, within XDR libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc. This flaw impacts a wide range of products from vendors like Cray, FreeBSD, GNU, HP, IBM, MIT, OpenAFS, OpenBSD, SGI, and Sun. With a CVSS score of 7.5, it is considered highly severe, allowing remote attackers to execute arbitrary code with low attack complexity and no authentication required, leading to potential compromise of confidentiality, integrity, and availability. Despite its high severity and EPSS score, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.