CVE-2003-0033 Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets.
HighCVSS 10.0
EPSS 11.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| snort | = 1.8.0 | No fix listed |
| snort | = 1.8.1 | No fix listed |
| snort | = 1.8.2 | No fix listed |
| snort | = 1.8.3 | No fix listed |
| snort | = 1.8.4 | No fix listed |
| snort | = 1.8.5 | No fix listed |
| snort | = 1.8.6 | No fix listed |
| snort | = 1.8.7 | No fix listed |
| snort | = 1.9.0 | No fix listed |
References
- 20030303 Snort RPC Vulnerability (fwd) mailing-list
- GLSA-200303-6.1 vendor-advisory
- GLSA-200304-06 vendor-advisory
- CA-2003-13 third-party-advisory us-government-resource
- DSA-297 vendor-advisory
- 20030303 Snort RPC Preprocessing Vulnerability patch third-party-advisory vendor-advisory
- snort-rpc-fragment-bo(10956) patch vdb-entry vendor-advisory
- VU#916785 third-party-advisory us-government-resource
- ESA-20030307-007 vendor-advisory
- MDKSA-2003:029 vendor-advisory
- 4418 vdb-entry
- 6963 patch vdb-entry vendor-advisory