PT-2004-3542 · Cisco · Snort

Published 2004-12-31 · Updated 2017-07-20 · CVE-2004-2652

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Snort versions prior to 2.3.0

Description The issue allows remote attackers to cause a denial of service (crash) via packets with invalid TCP/IP options, which trigger a null dereference. This occurs when printing TCP/IP options using FAST output or verbose mode.

Recommendations For versions prior to 2.3.0, update to version 2.3.0 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2004-2652

Affected Products

Snort

References · 12

• 🔥 http://taosecurity.blogspot.com/2004/12/details-on-snort-dos-condition-you-may.html · Exploit
• 🔥 https://exploit-db.com/exploits/25046 · Exploit
• 🔥 https://exploit-db.com/exploits/25047 · Exploit
• 🔥 http://securitytracker.com/id?1012656 · Exploit
• 🔥 http://osvdb.org/12578 · Exploit
• 🔥 http://securiteam.com/exploits/6X00L20C0S.html · Exploit
• 🔥 http://securityfocus.com/bid/12084 · Exploit
• http://secunia.com/advisories/13664 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2652 · Security Note
• http://frsirt.com/exploits/20041222.angelDust.c.php · Note
• http://snort.org/arc_news · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18689 · Note