Searching snort software vulnerabilities

Snort 1.6, when running in straight ASCII packe

attackers | straight | selected | service | decoded | logging | running | allows | denial | remote | packet | cause | Snort | ASCII | mode | IDS |

Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service (crash) by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan.


Various Intrusion Detection Systems (IDS) inclu

Detection | Intrusion | Systems | Various |

Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard "%u" Unicode encoding of ASCII characters in the requested URL.


SnortCenter 0.9.5, when configured to push Snor

SnortCenter |

SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and world-writable permissions, which allows local users to obtain usernames and passwords for the alert database servers.


Integer overflow in the TCP stream reassembly m

reassembly | overflow | Integer | stream | module | TCP |

Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.


The DecodeTCPOptions function in decode.c in Sn

DecodeTCPOptions | function | decodec | before | Snort |

The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remote attackers to cause a denial of service (crash) via packets with invalid TCP/IP options, which trigger a null dereference.


Stack-based buffer overflow in the Back Orifice

Stack-based | overflow | Orifice | buffer | Back |

Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a crafted UDP packet.


The frag3 preprocessor in Sourcefire Snort 2.4.

preprocessor | Sourcefire | Snort | frag3 |

The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remote attackers to evade detection of certain attacks, possibly related to IP option lengths.


The HTTP Inspect preprocessor (http_inspect) in

preprocessor | Inspect | HTTP |

The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return (\r) after the URL and before the HTTP declaration.


Stack-based buffer overflow in the DCE/RPC prep

preprocessor | Stack-based | overflow | DCE/RPC | before | buffer | Snort |

Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic.


Algorithmic complexity vulnerability in Snort b

vulnerability | Algorithmic | complexity | before | Snort |

Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."


Integer underflow in the DecodeGRE function in

src/decodec | DecodeGRE | underflow | function | Integer | Snort |

Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files.


The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.

preprocessor | Snort | frag3 |

The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ip_conntrack module loaded, allows remote attackers to cause a denial of service (segmentation fault and application crash) via certain UDP packets produced by send_morefrag_packet and send_overlap_packet.


Software vulnerabilities results 1 to 13 of 13     
Page: 1