Lucene search
HistoryNov 17, 2003 - 5:00 a.m.
CVE-2003-0850
tcp
reassembly
libnids
cve-2003-0850
memory corruption
arbitrary code
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.035 Low
EPSS
Percentile
91.6%
The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause “memory corruption” and possibly execute arbitrary code via “overlarge TCP packets.”
Affected configurations
Node
dug_songdsniffMatch2.3
ORrafal_wojtczuklibnidsMatch1.11
ORrafal_wojtczuklibnidsMatch1.12
ORrafal_wojtczuklibnidsMatch1.13
ORrafal_wojtczuklibnidsMatch1.14
ORrafal_wojtczuklibnidsMatch1.16
ORrafal_wojtczuklibnidsMatch1.17
Related
gentoo
gentoo
Libnids: remote code execution vulnerability
2003-11-22 00:00:00
nessus
nessus
Debian DSA-410-1 : libnids - buffer overflow
2004-09-29 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200311-08 (Libnids)
2008-09-24 00:00:00
Debian Security Advisory DSA 410-1 (libnids)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-410)
2008-01-17 00:00:00
ubuntucve
ubuntucve
CVE-2003-0850
2003-11-17 00:00:00
cvelist
cvelist
CVE-2003-0850
2003-10-25 04:00:00
nvd
nvd
CVE-2003-0850
2003-11-17 05:00:00
debian
debian
[SECURITY] [DSA 410-1] New libnids packages fix buffer overflow
2004-01-06 02:44:31
securityvulns
securityvulns
Libnids <= 1.17 buffer overflow
2003-10-28 00:00:00
osv
osv
libnids - buffer overflow
2004-01-05 00:00:00
debiancve
debiancve
CVE-2003-0850
2003-11-17 05:00:00
suse
suse
remote privilege escalation/ in thttpd
2003-10-31 12:38:13
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.035 Low
EPSS
Percentile
91.6%
Related for CVE-2003-0850