National Cyber-Alert System

Vulnerability Summary for CVE-2003-0209

Overview

Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#139129

Name: VU#139129

Type: Advisory

Hyperlink:http://www.kb.cert.org/vuls/id/139129

CERT/CC Advisory: CA-2003-13

Name: CA-2003-13

Hyperlink:http://www.cert.org/advisories/CA-2003-13.html

External Source: BID

Name: 7178

Type: Advisory; Patch Information

Hyperlink:http://www.securityfocus.com/bid/7178

External Source: DEBIAN

Name: DSA-297

Hyperlink:http://www.debian.org/security/2003/dsa-297

External Source: MISC

Name: http://www.coresecurity.com/common/showdoc.php?idx=313&idxseccion=10

Hyperlink:http://www.coresecurity.com/common/showdoc.php?idx=313&idxseccion=10

External Source: ENGARDE

Name: ESA-20030430-013

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=105172790914107&w=2

External Source: BUGTRAQ

Name: 20030428 GLSA: snort (200304-06)

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=105154530427824&w=2

External Source: BUGTRAQ

Name: 20030423 Snort <=1.9.1 exploit

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=105111217731583&w=2

External Source: BUGTRAQ

Name: 20030422 GLSA: snort (200304-05)

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=105103586927007&w=2

External Source: BUGTRAQ

Name: 20030415 CORE-2003-0307: Snort TCP Stream Reassembly Integer Overflow Vulnerability

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=105043563016235&w=2

External Source: MANDRAKE

Name: MDKSA-2003:052

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2003:052