Published: 31/12/2004 Updated: 20/07/2017

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 790

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

The DecodeTCPOptions function in decode.c in Snort prior to 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remote malicious users to cause a denial of service (crash) via packets with invalid TCP/IP options, which trigger a null dereference.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sourcefire snort 2.1.0
sourcefire snort 2.1.1_rc1
sourcefire snort 2.1.3
sourcefire snort 2.2

source: wwwsecurityfocuscom/bid/12084/info Snort is reported prone to a remote denial of service vulnerability The vulnerability is reported to exist in the DecodeTCPOptions() function of 'decodec', and is as a result of a failure to sufficiently handle malicious TCP packets A remote attacker may trigger this vulnerability to crash ...

source: wwwsecurityfocuscom/bid/12084/info Snort is reported prone to a remote denial of service vulnerability The vulnerability is reported to exist in the DecodeTCPOptions() function of 'decodec', and is as a result of a failure to sufficiently handle malicious TCP packets A remote attacker may trigger this vulnerability to crash a ...

NVD-CWE-Other http://taosecurity.blogspot.com/2004/12/details-on-snort-dos-condition-you-may.html http://www.frsirt.com/exploits/20041222.angelDust.c.php http://www.securiteam.com/exploits/6X00L20C0S.html http://www.snort.org/arc_news/http://www.securityfocus.com/bid/12084 http://www.osvdb.org/12578 http://securitytracker.com/id?1012656 http://secunia.com/advisories/13664 https://exchange.xforce.ibmcloud.com/vulnerabilities/18689 https://nvd.nist.gov https://www.exploit-db.com/exploits/25047/

CVE-2004-2652

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect