Bugtraq mailing list archives
Libnids <= 1.17 buffer overflow
From: rafal.wojtczuk () 7bulls com (Rafal Wojtczuk)
Date: Mon, 27 Oct 2003 20:09:55 +0100
Hello, Libnids is a library which implements the functionality of NIDS E-component. Libnids provides IP defragmentation, TCP stream reassembly and port scan detection. Robert Watson <rwatson () FreeBSD org> has found a bug in the part of libnids code responsible for TCP reassembly. The flaw probably allows for remote code execution. This vulnerability has been assigned a CVE name CAN-2003-0850. Applications not using libnids tcp reassembly (like scanlogd) are not vulnerable; others, like dsniff, are potentially vulnerable. All libnids versions <= 1.17 are vulnerable. Libnids 1.18, which fixes this issue, is available at http://libnids.sourceforge.net. Save yourself, Nergal
Current thread:
- Libnids <= 1.17 buffer overflow Rafal Wojtczuk (Oct 27)