intrusion sensor vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

Stack-based buffer overflow in the DCE/RPC preprocessor in Snort prior to 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote malicious users to execute arbitrary code via crafted SMB traffic.

Snort Snort 2.6.1 Snort Snort 2.6.1.1 Sourcefire Intrusion Sensor 4.6 Snort Snort Sourcefire Intrusion Sensor 4.5 Snort Snort 2.7 Beta1 Sourcefire Intrusion Sensor 4.1

4 EDB exploits

7.8

CVSSv2

The control-plane access-list implementation in Cisco IPS Software prior to 7.1(8p2)E4 and 7.2 prior to 7.2(2)E4 allows remote malicious users to cause a denial of service (MainApp process outage) via crafted packets to TCP port 7000, aka Bug ID CSCui67394.

Cisco Ips Sensor Software 7.1\\(3\\)e4 Cisco Ips Sensor Software 7.1\\(6\\)e4 Cisco Ips Sensor Software 7.1\\(8\\)e4 Cisco Ips Sensor Software 7.2\\(1\\)e4 Cisco Ips Sensor Software Cisco Ips Sensor Software 7.1\\(2\\)e4 Cisco Ips Sensor Software 7.1\\(4\\)e4 Cisco Ips Sensor Software 7.1\\(7\\)e4

7.8

CVSSv2

Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules prior to 7.1(7)sp1E4 allows remote malicious users to cause a denial of service (Analysis Engine process hang or device reload) via fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCue512...

Cisco Ips 4510 Sensor -Cisco Ips 4345 Sensor -Cisco Ips Nme -Cisco Idsm-2 -Cisco Intrusion Prevention System Cisco Asa 5500-x Series Ips Ssp Software 7.1 Cisco Asa 5585-x -Cisco Ips 4520 Sensor -Cisco Ips 4360 Sensor -

7.8

CVSSv2

The IP stack in Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software and hardware modules prior to 7.1(5)E4, IPS 4500 sensors prior to 7.1(6)E4, and IPS 4300 sensors prior to 7.1(5)E4 allows remote malicious users to cause a denial of service (MainApp p...

Cisco Intrusion Prevention System Cisco Asa 5500-x Series Ips Ssp Software 7.1 Cisco Ips 4360 Sensor -Cisco Ips Nme -Cisco Idsm-2 -Cisco Asa 5585-x -Cisco Ips 4520 Sensor -Cisco Ips 4510 Sensor -Cisco Ips 4345 Sensor -

7.5

CVSSv2

Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort prior to 2.4.3 allows remote malicious users to execute arbitrary code via a crafted UDP packet.

Sourcefire Snort 2.4.1 Sourcefire Snort 2.4.2 Sourcefire Snort 2.4.0

5 EDB exploits

7.5

CVSSv2

Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote malicious users to execute arbitrary code via a SRV_MULTI response containing a SRV...

2 EDB exploits

7.5

CVSSv2

The decompression algorithm in zlib 1.1.3 and previous versions, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow local and remote malicious users to execute arbitrary code vi...

Zlib Zlib

7.5

CVSSv2

Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort prior to 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS R...

Cisco Secure Intrusion Detection System Iss Realsecure Network Sensor 5.x Iss Realsecure Network Sensor 6.x Iss Realsecure Server Sensor 5.5 Iss Realsecure Server Sensor 6.0 Snort Snort 1.8.1 Cisco Catalyst 6000 Intrusion Detection System Module Enterasys Dragon 4.x

1 EDB exploit

7.2

CVSSv2

A vulnerability in the Sourcefire tunnel control channel protocol in Cisco Firepower System Software running on Cisco Firepower Threat Defense (FTD) sensors could allow an authenticated, local malicious user to execute specific CLI commands with root privileges on the Cisco Firep...

Cisco Firepower Threat Defense 6.0.1 Cisco Firepower Threat Defense 6.2.0 Cisco Firepower Threat Defense 6.2.1 Cisco Firepower Threat Defense 6.2.2 Cisco Firepower Threat Defense 6.0.0 Cisco Firepower Threat Defense 6.1.0 Cisco Firepower Threat Defense 5.4.0

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook