critical10.0Public exploit code
CVE-2003-0209
Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence n…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Snort 1.9.1 - 'p7snort191.sh' Remote Command Execution2003-04-23 · remote · linux · Verified
Impact
Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smoothwall | Smoothwall | Version 2.0_beta_4 |
| Sourcefire | Snort | Versions 1.8, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.8.5 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=105043563016235&w=2
- http://marc.info/?l=bugtraq&m=105103586927007&w=2
- http://marc.info/?l=bugtraq&m=105111217731583&w=2
- http://marc.info/?l=bugtraq&m=105154530427824&w=2
- http://marc.info/?l=bugtraq&m=105172790914107&w=2
- http://www.cert.org/advisories/CA-2003-13.html
- http://www.coresecurity.com/common/showdoc.php?idx=313&idxseccion=10
- http://www.debian.org/security/2003/dsa-297
- http://www.kb.cert.org/vuls/id/139129
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:052
- http://www.securityfocus.com/bid/7178
- http://marc.info/?l=bugtraq&m=105043563016235&w=2
- http://marc.info/?l=bugtraq&m=105103586927007&w=2
- http://marc.info/?l=bugtraq&m=105111217731583&w=2
- http://marc.info/?l=bugtraq&m=105154530427824&w=2
- http://marc.info/?l=bugtraq&m=105172790914107&w=2
- http://www.cert.org/advisories/CA-2003-13.html
- http://www.coresecurity.com/common/showdoc.php?idx=313&idxseccion=10
- http://www.debian.org/security/2003/dsa-297
- http://www.kb.cert.org/vuls/id/139129
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:052
- http://www.securityfocus.com/bid/7178