PT-2007-1724 · Cisco · Snort

Chris Rohlf · Publicado 2007-01-16 · Atualizado 2018-10-16 · CVE-2007-0251

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Snort version 2.6.1.2

Description The issue is related to an integer underflow in the DecodeGRE function, which can be triggered by remote attackers sending crafted GRE packets. This may lead to the corruption of log files or the writing of sensitive information into log files.

Recommendations For Snort version 2.6.1.2, consider updating to a newer version that addresses this issue, as the current version allows for potential log file corruption or sensitive information disclosure through crafted GRE packets. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-0251

Produtos afetados

Snort

Referências · 10

• http://securityreason.com/securityalert/2165 · Nota
• http://securityfocus.com/archive/1/456598/100/0/threaded · Nota
• http://vupen.com/english/advisories/2007/0152 · Nota
• http://labs.calyptix.com/advisories/CX-2007-01.txt · Nota
• http://osvdb.org/33464 · Nota
• http://securityfocus.com/bid/22004 · Nota
• http://osvdb.org/32095 · Nota
• http://snort.org/got_source/source.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0251 · Nota de Segurança
• http://securitytracker.com/id?1017507 · Nota