CVE-2006-0839
Summary
| CVE | CVE-2006-0839 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-02-22 02:02:00 UTC |
| Updated | 2018-10-18 16:29:00 UTC |
| Description | The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remote attackers to evade detection of certain attacks, possibly related to IP option lengths. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Sourcefire | Snort | 2.4.3 | All | All | All |
| Application | Sourcefire | Snort | 2.4.3 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Snort frag3 Preprocessor Packet Reassembly Vulnerability - Advisories - Secunia | SECUNIA | secunia.com | |
| Snort Frag3 Processor Fragmented Packet Detection Evasion Vulnerability | BID | www.securityfocus.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.