Unscored severity · published Mar 7, 2003
CVE-2003-0033
Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets
–
CVSS
11.9%
EPSS
No
On KEV
Description
Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets.
Exploitation
Is it being used?
Exploit prediction (EPSS)11.9% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SN
Snort · Snort
1.8.0; 1.8.1; 1.8.2; 1.8.3; 1.8.4; 1.8.5; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0033
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0033
marc.info
http://marc.info/?l=bugtraq&m=104673386226064&w=2
marc.info
http://marc.info/?l=bugtraq&m=104716001503409&w=2
marc.info
http://marc.info/?l=bugtraq&m=105154530427824&w=2
US Government Resource
http://www.cert.org/advisories/CA-2003-13.html
www.debian.org
http://www.debian.org/security/2003/dsa-297
Patch
http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21951
More from Snort
8.8
CVE-2016-1417
Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tcapi.dll that is…
7.5
CVE-2021-40114
Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remote attacker to cause…
7.5
CVE-2021-1223
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for…
5.8
CVE-2020-3299
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured File Policy for…
5.3
CVE-2023-20246
Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on…