PT-2007-1724 · Cisco · Snort

Chris Rohlf · Published 2007-01-16 · Updated 2018-10-16 · CVE-2007-0251

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Snort version 2.6.1.2

Description The issue is related to an integer underflow in the DecodeGRE function, which can be triggered by remote attackers sending crafted GRE packets. This may lead to the corruption of log files or the writing of sensitive information into log files.

Recommendations For Snort version 2.6.1.2, consider updating to a newer version that addresses this issue, as the current version allows for potential log file corruption or sensitive information disclosure through crafted GRE packets. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-0251

Affected Products

Snort

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2007-0251 · Security Note
• http://securityreason.com/securityalert/2165 · Note
• http://securityfocus.com/archive/1/456598/100/0/threaded · Note
• http://vupen.com/english/advisories/2007/0152 · Note
• http://labs.calyptix.com/advisories/CX-2007-01.txt · Note
• http://osvdb.org/33464 · Note
• http://securityfocus.com/bid/22004 · Note
• http://osvdb.org/32095 · Note
• http://snort.org/got_source/source.html · Note
• http://securitytracker.com/id?1017507 · Note