Vulnerability Details CVE-2003-0033
Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.119
EPSS Ranking 95.6%
CVSS Severity
CVSS v2 Score 10.0
References
- http://marc.info/?l=bugtraq&m=104673386226064&w=2
- http://marc.info/?l=bugtraq&m=104716001503409&w=2
- http://marc.info/?l=bugtraq&m=105154530427824&w=2
- http://www.cert.org/advisories/CA-2003-13.html
- http://www.debian.org/security/2003/dsa-297
- http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21951
- http://www.iss.net/security_center/static/10956.php
- http://www.kb.cert.org/vuls/id/916785
- http://www.linuxsecurity.com/advisories/engarde_advisory-2944.html
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:029
- http://www.osvdb.org/4418
- http://www.securityfocus.com/bid/6963
- http://marc.info/?l=bugtraq&m=104673386226064&w=2
- http://marc.info/?l=bugtraq&m=104716001503409&w=2
- http://marc.info/?l=bugtraq&m=105154530427824&w=2
- http://www.cert.org/advisories/CA-2003-13.html
- http://www.debian.org/security/2003/dsa-297
- http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21951
- http://www.iss.net/security_center/static/10956.php
- http://www.kb.cert.org/vuls/id/916785
- http://www.linuxsecurity.com/advisories/engarde_advisory-2944.html
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:029
- http://www.osvdb.org/4418
- http://www.securityfocus.com/bid/6963
Products affected by CVE-2003-0033
-
cpe:2.3:a:snort:snort:1.8.0
-
cpe:2.3:a:snort:snort:1.8.1
-
cpe:2.3:a:snort:snort:1.8.2
-
cpe:2.3:a:snort:snort:1.8.3
-
cpe:2.3:a:snort:snort:1.8.4
-
cpe:2.3:a:snort:snort:1.8.5
-
cpe:2.3:a:snort:snort:1.8.6
-
cpe:2.3:a:snort:snort:1.8.7
-
cpe:2.3:a:snort:snort:1.9.0