CVE-2003-0849

CVE-2003-0849 describes a buffer overflow vulnerability in cfengine 2.x before version 2.0.8, specifically within the net.c component. This flaw allows remote attackers to execute arbitrary code by crafting malicious packets with manipulated length values that are mishandled by the ReceiveTransaction function. With a CVSS score of 7.5, this vulnerability is considered highly severe, requiring no authentication and having low attack complexity, potentially leading to full compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or showing active exploitation, public exploit code exists on ExploitDB, indicating its exploitability. Despite this, there is minimal community discussion or media coverage surrounding this older vulnerability.