VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 15, 2003· Updated Jun 16, 2026

CVE-2003-0795

CVE-2003-0795

Description

The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service (crash) via a malformed telnet command to the telnet CLI port, which may trigger a null dereference.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • GNU/Zebra4 versions
    cpe:2.3:a:gnu:zebra:0.91a:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:gnu:zebra:0.91a:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:zebra:0.92a:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:zebra:0.93a:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:zebra:0.93b:*:*:*:*:*:*:*
  • Quagga (software)/Quagga6 versions
    cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:quagga:quagga:*:*:*:*:*:*:*:*range: <=0.96.3
    • cpe:2.3:a:quagga:quagga:0.95:*:*:*:*:*:*:*
    • cpe:2.3:a:quagga:quagga:0.96:*:*:*:*:*:*:*
    • cpe:2.3:a:quagga:quagga:0.96.1:*:*:*:*:*:*:*
    • cpe:2.3:a:quagga:quagga:0.96.2:*:*:*:*:*:*:*
    • (no CPE)range: <0.96.4
  • Sgi/Propack2 versions
    cpe:2.3:a:sgi:propack:2.2.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sgi:propack:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*
  • ZcashFoundation/Zebrallm-fuzzy
    Range: <=0.93b

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.