CVE-2003-0033

Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote...

10.0 High

Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets.

Exploit likelihood

11.9%Up 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets.

Record: CVE-2003-0033
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets.

Record: CVE-2003-0033
Updated: 2026-11-02

EUVDEUVD-2003-0033 No score

Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets.

Record: EUVD-2003-0033
Updated: 2026-11-03

GitHub AdvisoriesGHSA-2wc7-p52f-xgxm No score

Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote...

Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets.

Record: GHSA-2wc7-p52f-xgxm
Updated: 2026-11-02

Affected products

snort

Affected packages

Affected packages
Package	Affected	Fixed
`snort` Debian:3.0 From an advisory covering 2 CVEs	before 1.8.4beta1-3.1	1.8.4beta1-3.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-0033 is a high vulnerability (CVSS 10.0) in Snort, published March 7, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 11.9%, the 96th percentile. No source names a fixed version.

References

Show 8 moreShow less