CVEvulnerability

CVE-2003-0209

10.0 HIGH Published 2003-05-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-05-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.

Affected configurations

• smoothwall smoothwall 2.0 beta 4 • sourcefire snort 1.8 • sourcefire snort 1.8.1 • sourcefire snort 1.8.2 • sourcefire snort 1.8.3 • sourcefire snort 1.8.4 • sourcefire snort 1.8.5 • sourcefire snort 1.8.6 • sourcefire snort 1.8.7 • sourcefire snort 1.9 • sourcefire snort 1.9.1

References