PT-2007-1211 · Cisco · Snort

Cristian Estan + 2 · Publicado 2007-01-16 · Atualizado 2017-07-29 · CVE-2006-6931

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Snort versions prior to 2.6.1

Description: The issue allows remote attackers to cause a denial of service, resulting in CPU consumption and detection outage, via crafted network traffic. This is achieved through a backtracking attack during predicate evaluation in rule matching for certain rules.

Recommendations: For versions prior to 2.6.1, update to version 2.6.1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-6931

Produtos afetados

Snort

Referências · 19

• http://secunia.com/advisories/23716 · Nota
• http://secunia.com/advisories/24164 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6931 · Nota de Segurança
• http://secunia.com/advisories/24338 · Nota
• http://lists.immunitysec.com/pipermail/dailydave/2007-January/003954.html · Nota
• http://securityfocus.com/bid/21991 · Nota
• http://acsac.org/2006/advance_program.html · Nota
• http://acsac.org/2006/abstracts/54.html · Nota
• https://security-tracker.debian.org/tracker/CVE-2006-6931 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2007:051 · Aviso do Fabricante
• http://cs.wisc.edu/~smithr/pubs/randy_smith_acsac2006.zip · Nota
• http://snort.org/pub-bin/snortnews.cgi · Nota
• http://securitytracker.com/id?1017508 · Nota
• http://osvdb.org/32096 · Nota
• http://cs.wisc.edu/~smithr/pubs/acsac2006.pdf · Aviso do Fabricante