CVE-2003-0209 Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-ba...
HighCVSS 10.0
EPSS 38.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| smoothwall | = 2.0_beta_4 | No fix listed |
| sourcefire snort | = 1.8 | No fix listed |
| sourcefire snort | = 1.8.1 | No fix listed |
| sourcefire snort | = 1.8.2 | No fix listed |
| sourcefire snort | = 1.8.3 | No fix listed |
| sourcefire snort | = 1.8.4 | No fix listed |
| sourcefire snort | = 1.8.5 | No fix listed |
| sourcefire snort | = 1.8.6 | No fix listed |
| sourcefire snort | = 1.8.7 | No fix listed |
| sourcefire snort | = 1.9 | No fix listed |
| sourcefire snort | = 1.9.1 | No fix listed |
References
- 20030415 CORE-2003-0307: Snort TCP Stream Reassembly Integer Overflow Vulnerability mailing-list
- 20030422 GLSA: snort (200304-05) mailing-list
- 20030423 Snort <=1.9.1 exploit mailing-list
- 20030428 GLSA: snort (200304-06) mailing-list
- ESA-20030430-013 vendor-advisory
- CA-2003-13 third-party-advisory us-government-resource
- www.coresecurity.com
- DSA-297 vendor-advisory
- VU#139129 third-party-advisory us-government-resource
- MDKSA-2003:052 vendor-advisory
- 7178 exploit patch vdb-entry vendor-advisory