CVE-2003-0209

Smoothwall - Buffer Overflow

Title source: rule

Description

Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.

Exploits (1)

exploitdb WORKING POC VERIFIED

by truff · bashremotelinux

https://www.exploit-db.com/exploits/18

View Code ZIP pw:eip

References (11)

[US Government Resource] http://www.cert.org/advisories/CA-2003-13.html

[Various Sources] http://www.coresecurity.com/common/showdoc.php?idx=313&idxseccion=10

[Third Party Advisory, US Government Resource] http://www.kb.cert.org/vuls/id/139129

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDKSA-2003:052

[Exploit, Patch, Vendor Advisory] http://www.securityfocus.com/bid/7178

[Third Party Advisory] http://www.debian.org/security/2003/dsa-297

[Mailing List] http://marc.info/?l=bugtraq&m=105043563016235&w=2

[Mailing List] http://marc.info/?l=bugtraq&m=105103586927007&w=2

[Mailing List] http://marc.info/?l=bugtraq&m=105111217731583&w=2

[Mailing List] http://marc.info/?l=bugtraq&m=105154530427824&w=2

[Mailing List] http://marc.info/?l=bugtraq&m=105172790914107&w=2

Scores

EPSS 0.5743

EPSS Percentile 98.2%

Details

Status published

Products (11)

smoothwall/smoothwall 2.0_beta_4

sourcefire/snort 1.8

sourcefire/snort 1.8.1

sourcefire/snort 1.8.2

sourcefire/snort 1.8.3

sourcefire/snort 1.8.4

sourcefire/snort 1.8.5

sourcefire/snort 1.8.6

sourcefire/snort 1.8.7

sourcefire/snort 1.9

... and 1 more

Published May 05, 2003

Tracked Since Feb 18, 2026