CVE-2003-0850

CVE-2003-0850 describes a memory corruption vulnerability in the TCP reassembly functionality of libnids versions prior to 1.18, affecting products like dug_song dsniff and libnids, and rafal_wojtczuk dsniff and libnids. Attackers can trigger this by sending overlarge TCP packets, potentially leading to arbitrary code execution. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing unauthenticated remote attackers to achieve partial confidentiality, integrity, and availability impacts with low attack complexity. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion with over 10 mentions.