PT-2002-1201 · Snort · Snort

Published 2002-03-25 · Updated 2008-09-11 · CVE-2002-0115

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Snort version 1.8.3

Description The issue is related to a denial of service that can be caused by remote attackers sending a malformed ICMP packet. This is due to the improper definition of the minimum ICMP header size.

Recommendations For Snort version 1.8.3, update to a version that properly defines the minimum ICMP header size to prevent denial of service attacks.

Exploit

Fix

Related Identifiers

CVE-2002-0115

Affected Products

Snort

References · 7

• 🔥 http://online.securityfocus.com/archive/1/249340 · Exploit
• 🔥 https://exploit-db.com/exploits/21213 · Exploit
• http://iss.net/security_center/static/7874.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0115 · Security Note
• http://online.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-03-08&end=2002-03-14&mid=249623&threads=1 · Patch
• http://osvdb.org/2022 · Note
• http://securityfocus.com/bid/3849 · Note