NetSight
critical10.0Public exploit code

CVE-2003-0209

Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence n…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.

Affected products

VendorProductAffected versions
SmoothwallSmoothwall
Version 2.0_beta_4
SourcefireSnort
Versions 1.8, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.8.5

References