CVE-2003-0795 — security flaw

Back Back to CVE browser

MEDIUM

security flaw

Published Nov 18, 2003

5.0

MEDIUM

CVSS 2.0

EPSS 8.43%

Description

The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service (crash) via a malformed telnet command to the telnet CLI port, which may trigger a null dereference.

Affected products

Red Hat Enterprise Linux AS (Advanced Server) version 2.1

n/a

Fixed · RHSA-2003:305
Red Hat Linux 7.2

n/a

Fixed · RHSA-2003:307
Red Hat Linux 7.3

n/a

Fixed · RHSA-2003:307
Red Hat Linux 8.0

n/a

Fixed · RHSA-2003:307
Red Hat Linux 9

n/a

Fixed · RHSA-2003:307
Red Hat Linux Advanced Workstation 2.1

n/a

Fixed · RHSA-2003:305

Product	Package	State	Advisory
Red Hat Enterprise Linux AS (Advanced Server) version 2.1	n/a	Fixed	RHSA-2003:305
Red Hat Linux 7.2	n/a	Fixed	RHSA-2003:307
Red Hat Linux 7.3	n/a	Fixed	RHSA-2003:307
Red Hat Linux 8.0	n/a	Fixed	RHSA-2003:307
Red Hat Linux 9	n/a	Fixed	RHSA-2003:307
Red Hat Linux Advanced Workstation 2.1	n/a	Fixed	RHSA-2003:305

Remediation

No remediation recorded yet.

Metrics

8.43% 0.08431

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.08431

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (9 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	8.43% (0.08431)	94.84th	v5 (v2026.06.15)
Jun 15, 2026	8.23% (0.08227)	94.15th	v5 (v2026.06.15)
Mar 17, 2025	8.01% (0.08008)	91.47th	v4 (v2025.03.14)
Dec 12, 2024	1.59% (0.01593)	87.88th	v3 (v2023.03.01)
Jun 13, 2024	1.77% (0.01767)	88.05th	v3 (v2023.03.01)
Mar 7, 2023	1.77% (0.01767)	86.05th	v3 (v2023.03.01)
Mar 6, 2023	4.48% (0.04482)	88.77th	v2 (v2022.01.01)
Apr 1, 2022	4.48% (0.04482)	87.66th	v2 (v2022.01.01)
Feb 4, 2022	4.48% (0.04482)	71.45th	v2 (v2022.01.01)

Weaknesses (1)

CWE-20

Improper Input Validation

References (9)

http://marc.info/?l=bugtraq&m=106883387304266&w=2
mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/10563
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.debian.org/security/2004/dsa-415
vendor-advisoryx_refsource_DEBIANPatchVendor Advisory
http://www.redhat.com/support/errata/RHSA-2003-305.html
vendor-advisoryx_refsource_REDHATPatchVendor Advisory
http://www.redhat.com/support/errata/RHSA-2003-307.html
vendor-advisoryx_refsource_REDHATPatchVendor Advisory
https://access.redhat.com/security/cve/CVE-2003-0795
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1617088
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2003-0795
https://www.cve.org/CVERecord?id=CVE-2003-0795

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=106883387304266&w=2		mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/10563		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.debian.org/security/2004/dsa-415		vendor-advisoryx_refsource_DEBIANPatchVendor Advisory
http://www.redhat.com/support/errata/RHSA-2003-305.html		vendor-advisoryx_refsource_REDHATPatchVendor Advisory
http://www.redhat.com/support/errata/RHSA-2003-307.html		vendor-advisoryx_refsource_REDHATPatchVendor Advisory
https://access.redhat.com/security/cve/CVE-2003-0795		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1617088		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2003-0795
https://www.cve.org/CVERecord?id=CVE-2003-0795