CVE-2003-0209

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=105043563016235&w=2
http://marc.info/?l=bugtraq&m=105103586927007&w=2
http://marc.info/?l=bugtraq&m=105111217731583&w=2
http://marc.info/?l=bugtraq&m=105154530427824&w=2
http://marc.info/?l=bugtraq&m=105172790914107&w=2
http://www.cert.org/advisories/CA-2003-13.htmlUS Government Resource
http://www.coresecurity.com/common/showdoc.php?idx=313&idxseccion=10
http://www.debian.org/security/2003/dsa-297
http://www.kb.cert.org/vuls/id/139129Third Party Advisory, US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2003:052
http://www.securityfocus.com/bid/7178Exploit, Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=105043563016235&w=2
http://marc.info/?l=bugtraq&m=105103586927007&w=2
http://marc.info/?l=bugtraq&m=105111217731583&w=2
http://marc.info/?l=bugtraq&m=105154530427824&w=2
http://marc.info/?l=bugtraq&m=105172790914107&w=2
http://www.cert.org/advisories/CA-2003-13.htmlUS Government Resource
http://www.coresecurity.com/common/showdoc.php?idx=313&idxseccion=10
http://www.debian.org/security/2003/dsa-297
http://www.kb.cert.org/vuls/id/139129Third Party Advisory, US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2003:052
http://www.securityfocus.com/bid/7178Exploit, Patch, Vendor Advisory

Timeline

Published: May 5, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-02107.5Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of servi CVE-2003-02115.0Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service (memory consumption) via a large number of rejected connec CVE-2003-02127.5handleAccept in rinetd before 0.62 does not properly resize the connection list when it becomes full and sets an array index incorrectly, wh CVE-2003-02137.5ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which CVE-2003-02144.6run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.CVE-2003-02157.5SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via the (1) username and CVE-2003-02169.3Unknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and gain access to the enable mode without a pass CVE-2003-02176.8Cross-site scripting (XSS) vulnerability in Neoteris Instant Virtual Extranet (IVE) 3.01 and earlier allows remote attackers to insert arbit CVE-2003-02187.5Buffer overflow in PostMethod() function for Monkey HTTP Daemon (monkeyd) 0.6.1 and earlier allows remote attackers to execute arbitrary cod CVE-2003-02197.5Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute administrator commands by sniffing packets from a valid s CVE-2003-02207.5Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to e CVE-2003-02217.2The (1) dupatch and (2) setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allows local users to overwrite files and possibly gain root p