CVE-2003-0209: Buffer Overflow
Published Apr 16, 2003
·Updated
Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.
Affected Software
11 affected components
Smoothwall Smoothwall=2.0_beta_4
Sourcefire Snort=1.8
Sourcefire Snort=1.8.1
Sourcefire Snort=1.8.2
Sourcefire Snort=1.8.3
Sourcefire Snort=1.8.4
Sourcefire Snort=1.8.5
Sourcefire Snort=1.8.6
Sourcefire Snort=1.8.7
Sourcefire Snort=1.9
Sourcefire Snort=1.9.1
Remediation
Patch Available
Event History
Apr 16, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
May 5, 2003
Data Sourced
via NVD·04:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0209?
CVE-2003-0209 has a high severity rating due to its potential to allow remote code execution through a heap-based buffer overflow.
2
How do I fix CVE-2003-0209?
To fix CVE-2003-0209, update Snort to a version later than 2.0 that has addressed this vulnerability.
3
Which versions of Snort are affected by CVE-2003-0209?
CVE-2003-0209 affects Snort versions 1.8.x and 1.9.x.
4
Can CVE-2003-0209 be exploited remotely?
Yes, CVE-2003-0209 can be exploited remotely by sending specially crafted packets containing large sequence numbers.
5
What types of attacks are possible due to CVE-2003-0209?
Exploitation of CVE-2003-0209 could lead to arbitrary code execution, allowing attackers to gain control of the affected system.