CVE coverage

CVE-2003-0818

CVSS 7.5 10 detections found

Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.

Detection rules

Source	Rule	Status	Updated
suricata	GPL EXPLOIT NTLM ASN.1 vulnerability scan attempt	rev 14	2024-04-03
suricata	GPL NETBIOS SMB NTLMSSP invalid mechlistMIC attempt	rev 12	2024-03-08
suricata	GPL NETBIOS SMB-DS DCERPC NTLMSSP invalid mechlistMIC attempt	rev 13	2024-03-08
suricata	GPL NETBIOS SMB-DS Session Setup NTMLSSP asn1 overflow attempt	rev 21	2019-07-26
suricata	GPL NETBIOS SMB-DS Session Setup NTMLSSP unicode asn1 overflow attempt	rev 7	2019-07-26
snort	GPL NETBIOS SMB-DS DCERPC NTLMSSP invalid mechlistMIC attempt	rev 12	2012-09-12
snort	GPL NETBIOS SMB NTLMSSP invalid mechlistMIC attempt	rev 11	2012-09-12
snort	GPL EXPLOIT NTLM ASN.1 vulnerability scan attempt	rev 11	2012-07-27
snort	GPL NETBIOS SMB-DS Session Setup NTMLSSP unicode asn1 overflow attempt	rev 7	2011-09-22
snort	GPL NETBIOS SMB-DS Session Setup NTMLSSP asn1 overflow attempt	rev 21	2011-09-22