5 - CVE-2003-0653

Executive Summary

Informations
Name	CVE-2003-0653	First vendor Publication	2003-08-27
Vendor	Cve	Last vendor Modification	2008-09-10

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The OSI networking kernel (sys/netiso) in NetBSD 1.6.1 and earlier does not use a BSD-required "PKTHDR" mbuf when sending certain error responses to the sender of an OSI packet, which allows remote attackers to cause a denial of service (kernel panic or crash) via certain OSI packets.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0653

CPE : Common Platform Enumeration

Type	Description	Count
Os	Netbsd cpe:2.3:o:netbsd:netbsd:1.6.1:::::::* cpe:2.3:o:netbsd:netbsd:1.6:::::::* cpe:2.3:o:netbsd:netbsd:1.5.3:::::::* cpe:2.3:o:netbsd:netbsd:1.5.2:::::::* cpe:2.3:o:netbsd:netbsd:1.5.1:::::::* cpe:2.3:o:netbsd:netbsd:1.5:::::::*	6

Open Source Vulnerability Database (OSVDB)

Id	Description
2376	NetBSD OSI Networking Kernel DoS NetBSD contains a flaw that may allow a remote denial of service. The issue is triggered when a malicious user sends a carefully prepared OSI networking packet to a victim system that is using the OSI networking kernel (sys/netiso), and will result in loss of availability for the platform.