PatchTheCVEdsniff vulnerabilities and fixes
Recent CVEs affecting dsniff, with upgrade or downgrade steps. 2 tracked.
dsniff has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2003-11-17. Highest priority: CVE-2003-0850 (score 49/100).
- CVE-2003-0850 HIGH 7.5 DOWNGRADE DOWNGRADE The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" a
- CVE-2002-2049 HIGH 7.5 DOWNGRADE DOWNGRADE configure for Dsniff 2.3, fragroute 1.2, and fragrouter 1.6, when downloaded from monkey.org on May 17, 2002,
FAQ
How do I fix dsniff vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dsniff being exploited right now?
None of the tracked dsniff CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dsniff CVE should I patch first?
CVE-2003-0850 currently ranks highest (49/100): The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" a.