PT-2007-1211 · Cisco · Snort

Cristian Estan + 2 · Published 2007-01-16 · Updated 2017-07-29 · CVE-2006-6931

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Snort versions prior to 2.6.1

Description: The issue allows remote attackers to cause a denial of service, resulting in CPU consumption and detection outage, via crafted network traffic. This is achieved through a backtracking attack during predicate evaluation in rule matching for certain rules.

Recommendations: For versions prior to 2.6.1, update to version 2.6.1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-6931

Affected Products

Snort

References · 19

• https://nvd.nist.gov/vuln/detail/CVE-2006-6931 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2006-6931 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:051 · Vendor Advisory
• http://cs.wisc.edu/~smithr/pubs/acsac2006.pdf · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200702-03.xml · Vendor Advisory
• http://acsac.org/2006/papers/54.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-6931 · Vendor Advisory
• http://secunia.com/advisories/23716 · Note
• http://secunia.com/advisories/24164 · Note
• http://secunia.com/advisories/24338 · Note
• http://lists.immunitysec.com/pipermail/dailydave/2007-January/003954.html · Note
• http://securityfocus.com/bid/21991 · Note
• http://acsac.org/2006/advance_program.html · Note
• http://acsac.org/2006/abstracts/54.html · Note
• http://cs.wisc.edu/~smithr/pubs/randy_smith_acsac2006.zip · Note