CVE-2003-0850 The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets."
HighCVSS 7.5
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dug song dsniff | = 2.3 | No fix listed |
| rafal wojtczuk libnids | = 1.11 | No fix listed |
| rafal wojtczuk libnids | = 1.12 | No fix listed |
| rafal wojtczuk libnids | = 1.13 | No fix listed |
| rafal wojtczuk libnids | = 1.14 | No fix listed |
| rafal wojtczuk libnids | = 1.16 | No fix listed |
| rafal wojtczuk libnids | = 1.17 | No fix listed |
| debian/libnids(Debian:12) | < 1.18-1 | 1.18-1 |
| debian/libnids(Debian:13) | < 1.18-1 | 1.18-1 |
| debian/libnids(Debian:14) | < 1.18-1 | 1.18-1 |
References
- CLA-2003:773 vendor-advisory
- 20031027 Libnids <= 1.17 buffer overflow mailing-list
- 10543 third-party-advisory
- sourceforge.net vendor-advisory
- DSA-410 patch vendor-advisory
- Debian Security Tracker CVE-2003-0850 vendor-advisory