The vulnerability of the Snort intrusion detection system, related to errors in processing HTTP headers, allows a perpetrator to bypass the configured file policy for HTTP.

🗓️ 02 Feb 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Snort intrusion detection system vulnerability in HTTP header processing allows bypass of the file policy.

Reporter	Title	Published	Views	Family All 38
Tenable Nessus	Cisco Firepower Threat Defense HTTP Detection Engine File Policy Bypass (cisco-sa-snort-filepolbypass-67DEwMe2)	4 Feb 202100:00	–	nessus
Tenable Nessus	Cisco Integrated Services Routers 1000/4000 Series HTTP Detection Engine File Policy Bypass (cisco-sa-snort-filepolbypass-67DEwMe2)	4 Feb 202100:00	–	nessus
Tenable Nessus	Debian dla-3317 : snort - security update	11 Feb 202300:00	–	nessus
Tenable Nessus	Debian DSA-5354-1 : snort - security update	18 Feb 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2021-1223	10 Sep 202500:00	–	nessus
Cisco	Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability	13 Jan 202116:00	–	cisco
CNNVD	Security Vulnerabilities in Multiple Cisco Products	13 Jan 202100:00	–	cnnvd
CVE	CVE-2021-1223	13 Jan 202121:16	–	cve
Cvelist	CVE-2021-1223 Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability	13 Jan 202121:16	–	cvelist
Debian	[SECURITY] [DLA 3317-1] snort security update	10 Feb 202323:23	–	debian

Vulners

Node

cisco_systems cisco_firepower_management_centerMatch2.9.14.0

OR

cisco_systems cisco_firepower_management_centerMatch2.9.15

OR

cisco_systems cisco_firepower_management_centerMatch2.9.16

OR

cisco_systems firepower_threat_defenseRange<6.7.0

OR

cisco_systems snortRange<2.9.17

OR

cisco_systems cisco_ios_xeRange<17.4.1

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-filepolbypass-67DEwMe2
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.8/
web	www.web.nvd.nist.gov/view/vuln/detail

13 Sep 2023 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

CVSS 35.8

EPSS0.01985

Snort intrusion detection Hypertext Transfer Protocol header processing bypass file policy