Vulnerability CVE-2006-0839
Published: 2006-02-21   Modified: 2012-02-12

Description:
The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remote attackers to evade detection of certain attacks, possibly related to IP option lengths.

Type:

CWE-Other

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
Partial
None
Affected software
Sourcefire -> Snort 

 References:
http://www.securityfocus.com/archive/1/425290/100/0/threaded
http://www.securityfocus.com/bid/16705
https://exchange.xforce.ibmcloud.com/vulnerabilities/24811
Copyright 2024, cxsecurity.com

 

Back to Top