CVE-2003-0209 Integer overflow in n/a
Remote attackers can execute arbitrary code on Snort systems via a heap-based buffer overflow caused by an integer overflow in TCP stream reassembly.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2003-0209?
CVE-2003-0209 is a critical vulnerability in n/a, published on 16 Apr 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.
Which versions are affected by CVE-2003-0209?
It affects 2 products.
Products include Smoothwall Smoothwall, Sourcefire Snort.
How do I fix CVE-2003-0209?
Upgrade to a fixed version.
Is CVE-2003-0209 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2003-0209 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-hp46-mhrx-cx3g.