CVE-2003-0516
EPSS 0.90%
Description
cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in (1) caller ID or (2) caller name strings.
How to fix CVE-2003-0516
To remediate CVE-2003-0516, upgrade the affected package to a fixed version below.
- Debian/mgetty—upgrade to 1.1.29 or later
Is CVE-2003-0516 being exploited?
Low — EPSS is 0.9%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 1.1.29