CVE-2003-0776
saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers...
saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.
Exploit likelihood
What each source reports
NVD Score used
saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.
- Record
CVE-2003-0776- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.
- Record
CVE-2003-0776- Updated
- 2026-11-02
EUVDEUVD-2003-0767 No score
saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.
- Record
EUVD-2003-0767- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pf42-5v8g-g3xx No score
saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers...
saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.
- Record
GHSA-pf42-5v8g-g3xx- Updated
- 2026-11-02
OSV No score
saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.
- Record
CVE-2003-0776- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0776 No score
saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.
- Record
DEBIAN-CVE-2003-0776- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sane-backendsDebian:12 |
before 1.0.11-1 | 1.0.11-1 |
sane-backendsDebian:13 |
before 1.0.11-1 | 1.0.11-1 |
sane-backendsDebian:14 |
before 1.0.11-1 | 1.0.11-1 |
sane-backendsDebian:3.0 From an advisory covering 6 CVEs |
before 1.0.7-4 | 1.0.7-4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0776 is a high vulnerability (CVSS 7.5) in Sane, published September 11, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.81%, the 78th percentile. Fixed in sane-backends 1.0.11-1.
References
redhat.com/support/errata/RHSA-2003-278.html
novell.com/linux/security/advisories/2003_046_sane.html
securityfocus.com/bid/8593
debian.org/security/2003/dsa-379
mandriva.com/security/advisories?name=MDKSA-2003:099
nvd.nist.gov/vuln/detail/CVE-2003-0776
github.com/advisories/GHSA-pf42-5v8g-g3xx
security-tracker.debian.org/tracker/CVE-2003-0776