Buffer overflow in Snort RPC preprocessor

Overview There is a buffer overflow vulnerability in the RPC preprocessing feature of Snort versions 1.8 through 1.9.0 and 2.0 beta. Description Martin Roesch, the primary Snort developer, described the vulnerability by saying:When the RPC decoder normalizes fragmented RPC records, it incorrectly...

CVE-2002-0115

Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service crash and core dump via a malformed ICMP packet...

CVE-2002-0115

The CVE-2002-0115 entry concerns Snort 1.8.3, where the minimum ICMP header size is not properly defined. This allows remote attackers to cause a denial of service (crash and core dump) by sending a malformed ICMP packet. The documents state the affected component is the ICMP handling in Snort 1....

Protection bypass in snort

By using short packets it's possible to bypass attack signature protection...

Demarc PureSecure 1.0.5 - Authentication Check SQL Injection

Demarc PureSecure 1.0.5 - Authentication Check SQL Injection source: https://www.securityfocus.com/bid/4520/info Demarc PureSecure is a commercially available graphical front-end for Snort, in addition to being a generalized network monitoring solution. Snort is an open-source NIDS Network...

CVE-2002-0115

Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service crash and core dump via a malformed ICMP packet...

remote memory reading through tcp/icmp

Greets: in no particular order Marty and others for their brilliant work with Snort Fyodor for nmap LBNL Network Research Group zen-parse 4 and jaguar for looking over this and suggesting improvements. It is possible to read parts of a remote machines memory. To be specific, it would have to be...

Brecht Claerhout Sniffit 0.3.6 HIP/0.3.7 Beta - Mail Logging Buffer Overflow (3)

// source: https://www.securityfocus.com/bid/1158/info Sniffit is a freely available, open source network monitoring tool. It is designed for use on the Unix and Linux Operating Systems. Sniffit contains a remotely exploitable buffer overflow vulnerability. If Sniffit is configured to log emails,...

Snort 1.8.3 - ICMP Denial of Service

Snort 1.8.3 - ICMP Denial of Service source: https://www.securityfocus.com/bid/3849/info Snort is a network intrusion detection system IDS. It is originally written for Linux and Unix systems, although it has also been ported to run under Microsoft Windows. Snort is capable of flexible and powerf...

Snort 1.8.3 - ICMP Denial of Service

source: https://www.securityfocus.com/bid/3849/info Snort is a network intrusion detection system IDS. It is originally written for Linux and Unix systems, although it has also been ported to run under Microsoft Windows. Snort is capable of flexible and powerful content analysis of network traffi...

CVE-2001-1558

Unknown vulnerability in IP defragmenter frag2 in Snort before 1.8.3 allows attackers to cause a denial of service crash...

CVE-2000-1226

Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service crash by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan...

Re: Snort 1.6 and nmap 2.54beta1

From the BUGS file distributed with Snort: ------------------------------------------------------------------------- Bug reports should be sent to [email protected] Please include the following information with your report: System Architecture Sparc, x86, etc Operating System and version Linux...

DoS против snort

Программа умирает при получении пакета с неизвестным кодом протокола...

Snort 1.6 and nmap 2.54beta1

I don't know if this has been reported before but here it goes. snort 1.6 crashes when it's "hit" by a nmap protocol scan nmap -sO; It failes to write some packets to a file and ends whit a fopen error. I woud appriciate if someone can reproduce this. Sorry for my bad English...