PT-2007-1724

CVE-2007-0251

·

Publicado

2007-01-16

·

Atualizado

2018-10-16

Descrição por

CVSS 2.0
7.8
Alta
MétricasAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Snort version 2.6.1.2
Description The issue is related to an integer underflow in the DecodeGRE function, which can be triggered by remote attackers sending crafted GRE packets. This may lead to the corruption of log files or the writing of sensitive information into log files.
Recommendations For Snort version 2.6.1.2, consider updating to a newer version that addresses this issue, as the current version allows for potential log file corruption or sensitive information disclosure through crafted GRE packets. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾