Every CVESearch/Get API key

CVE-2003-0685

Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious...

7.5 HighFix available

CVE-2003-0685 is a high vulnerability (CVSS 7.5) in Netris, published August 15, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.42%, the 84th percentile. Fixed in netris 0.52-1.

What does this mean?
Severity
7.5 HighCVSS 2.0, NVD
Exploit chance
2.42%EPSS, 84th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0.52-1netris +2 more

Description

Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response.

Exploit likelihood

2.42%Down 1.0 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
netris
Debian:12
before 0.52-1
0.52-1
netris
Debian:14
before 0.52-1, plus listed versions
0.4-30.5-20.5-2.0.10.5-4woody1
0.52-1
netris
Debian:3.0
before 0.5-4woody1
0.5-4woody1

What each source reports

NVD Score used7.5

Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response.

Record
CVE-2003-0685
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response.

Record
CVE-2003-0685
Updated
2026-11-02
EUVDEUVD-2003-0676No score

Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response.

Record
EUVD-2003-0676
Updated
2026-11-03
GitHub AdvisoriesGHSA-wwgx-gv4h-mmw4No score

Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious...

Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response.

Record
GHSA-wwgx-gv4h-mmw4
Updated
2026-11-02
OSVNo score

Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response.

Record
CVE-2003-0685
Updated
2026-11-02
OSVDEBIAN-CVE-2003-0685No score

Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response.

Record
DEBIAN-CVE-2003-0685
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open