10

CVE-2003-0209

Exploit
Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Smoothwall ≫ Smoothwall Version2.0_beta_4
Sourcefire ≫ Snort Version1.8
Sourcefire ≫ Snort Version1.8.1
Sourcefire ≫ Snort Version1.8.2
Sourcefire ≫ Snort Version1.8.3
Sourcefire ≫ Snort Version1.8.4
Sourcefire ≫ Snort Version1.8.5
Sourcefire ≫ Snort Version1.8.6
Sourcefire ≫ Snort Version1.8.7
Sourcefire ≫ Snort Version1.9
Sourcefire ≫ Snort Version1.9.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 38.03% 0.984
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=105154530427824&w=2
http://www.cert.org/advisories/CA-2003-13.html
US Government Resource
http://www.debian.org/security/2003/dsa-297
http://marc.info/?l=bugtraq&m=105043563016235&w=2
http://marc.info/?l=bugtraq&m=105103586927007&w=2
http://marc.info/?l=bugtraq&m=105111217731583&w=2
http://marc.info/?l=bugtraq&m=105172790914107&w=2
http://www.coresecurity.com/common/showdoc.php?idx=313&idxseccion=10
http://www.kb.cert.org/vuls/id/139129
Third Party Advisory
US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2003:052
http://www.securityfocus.com/bid/7178
Patch
Vendor Advisory
Exploit