CVE-2003-0516: Gert Doering Mgetty

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in (1) caller ID or (2) caller name strings.

Affected products

Published 2003-08-18. Last modified 2026-06-16.