CVE-2003-0850
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Libnids是一款NIDS功能实现库。 Libnids在处理TCP重组的时候缺少正确的缓冲区边界检查，远程攻击者可以利用这个漏洞进行缓冲区溢出攻击。 Libnids提供IP分片，TCP流重组和端口扫描检测等功能，Libnids在处理过大的TCP包时存在问题，可导致发送恶意TCP包使使用Libnids TCP包重组功能的应用程序崩溃，精心提供恶意数据可能以应用程序进程在系统上执行任意指令。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2003-0850
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets."
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Libnids TCP包重组内存破坏漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Libnids是一款NIDS功能实现库。 Libnids在处理TCP重组的时候缺少正确的缓冲区边界检查，远程攻击者可以利用这个漏洞进行缓冲区溢出攻击。 Libnids提供IP分片，TCP流重组和端口扫描检测等功能，Libnids在处理过大的TCP包时存在问题，可导致发送恶意TCP包使使用Libnids TCP包重组功能的应用程序崩溃，精心提供恶意数据可能以应用程序进程在系统上执行任意指令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2003-0850
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2003-0850
请登录查看更多情报信息。
Vendor Advisories for CVE-2003-0850 (2)
Mailing List Discussions for CVE-2003-0850 (1)
Other References for CVE-2003-0850 (2)
-
http://sourceforge.net/project/shownotes.php?release_id=191323 x_refsource_CONFIRM
-
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000773 vendor-advisory x_refsource_CONECTIVA
Same Patch Batch · n/a · 2003-10-25 · 13 CVEs total
| CVE-2001-1411 | gm4格式字符串漏洞 | |
| CVE-2001-1412 | Apple Mac OS X nidump密码文件泄露漏洞 | |
| CVE-2002-1569 | GV Gunzipped存档恶意文件名称命令执行漏洞 | |
| CVE-2003-0852 | Sylpheed-Claws Mail客户端SMTP错误报告串处理漏洞 | |
| CVE-2003-0853 | Coreutils ls程序宽度参数整数溢出漏洞 | |
| CVE-2003-0854 | Coreutils ls程序宽度参数整数溢出漏洞 | |
| CVE-2003-0872 | SCO OpenServer不安全临时文件漏洞 | |
| CVE-2003-0874 | DeskPRO SQL注入漏洞 | |
| CVE-2003-0875 | OpenSLP slpd script slpd.all_init符号链接漏洞 | |
| CVE-2003-0894 | Oracle数据库OracleO二进制本地缓冲区溢出漏洞 | |
| CVE-2003-0896 | Sun Java Virtual Machine Slash Path Security Model Circumvention漏洞 | |
| CVE-2003-0897 | Windows XP CommCtl32.dll “打破”漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2003-0850
No comments yet