bugtraq - Libnids <= 1.17 buffer overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20031027190955.GA24303@warszawa.7bulls.com>
Date: Mon, 27 Oct 2003 20:09:55 +0100
From: rafal.wojtczuk@...lls.com (Rafal Wojtczuk)
To: bugtraq@...urityfocus.com
Subject: Libnids <= 1.17 buffer overflow


Hello,
	Libnids is a library which implements the functionality of NIDS
E-component. Libnids provides IP defragmentation, TCP stream reassembly and
port scan detection.
	Robert Watson <rwatson@...eBSD.org> has found a bug in the part of 
libnids code responsible for TCP reassembly. The flaw probably allows for 
remote code execution. This vulnerability has been assigned a CVE name 
CAN-2003-0850.
	Applications not using libnids tcp reassembly (like scanlogd) are not 
vulnerable; others, like dsniff, are potentially vulnerable.
	All libnids versions <= 1.17 are vulnerable. Libnids 1.18, which fixes 
this issue, is available at http://libnids.sourceforge.net.

Save yourself,
Nergal