[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bugtraq
Subject:    Libnids <= 1.17 buffer overflow
From:       rafal.wojtczuk () 7bulls ! com (Rafal Wojtczuk)
Date:       2003-10-27 19:09:55
[Download RAW message or body]

Hello,
	Libnids is a library which implements the functionality of NIDS
E-component. Libnids provides IP defragmentation, TCP stream reassembly and
port scan detection.
	Robert Watson <rwatson@FreeBSD.org> has found a bug in the part of 
libnids code responsible for TCP reassembly. The flaw probably allows for 
remote code execution. This vulnerability has been assigned a CVE name 
CAN-2003-0850.
	Applications not using libnids tcp reassembly (like scanlogd) are not 
vulnerable; others, like dsniff, are potentially vulnerable.
	All libnids versions <= 1.17 are vulnerable. Libnids 1.18, which fixes 
this issue, is available at http://libnids.sourceforge.net.

Save yourself,
Nergal
[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic