CVE-2003-0033

KRITISCH 10.0CVE-2003-0033 · Published 07/03/2003 · updated 16/06/2026

Package	Affected versions	Patched versions
snort snort	`= 1.8.0= 1.8.1= 1.8.2= 1.8.3= 1.8.4= 1.8.5= 1.8.6= 1.8.7= 1.9.0`	No fix yet

Description

Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets.

References

marc.info
marc.info
marc.info
cert.org/advisories/CA-2003-13.html · US Government Resource
debian.org/security/2003/dsa-297
iss.net/issEn/delivery/xforce/alertdetail.jsp · Patch
iss.net/security_center/static/10956.php · Patch
kb.cert.org/vuls/id/916785 · Third Party Advisory
linuxsecurity.com/advisories/engarde_advisory-2944.html
mandrakesoft.com/security/advisories
osvdb.org/4418
securityfocus.com/bid/6963 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free