Sourcefire vulnerabilities
7 vulnerabilities
Known vulnerabilities in Sourcefire products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 8 products.
Products
8- Snort5 vulnerabilities
- 3D Sensor1 vulnerabilities
- Defense Center1 vulnerabilities
- Intrusion Sensor1 vulnerabilities
- 3D10000 vulnerabilities
- 3D20000 vulnerabilities
- 3D99000 vulnerabilities
- Dc10000 vulnerabilities
CVE-2003-0209smoothwallsmoothwall+1
EPSS score38.63%
Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.CVE-2005-3252sourcefiresnortEPSS score83.90%
Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a crafted UDP packet.CVE-2004-2652sourcefiresnortEPSS score11.19%
The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remote attackers to cause a denial of service (crash) via packets with invalid TCP/IP options, which trigger a null dereference.CVE-2009-2344sourcefire3d_sensor+1EPSS score9.25%
The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote authenticated users to gain privileges via a $admin value for the admin parameter in an edit action to admin/user/user.cgi and unspecified other components.CVE-2006-2769debiansnort+1EPSS score10.81%
The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return (\r) after the URL and before the HTTP declaration.CVE-2006-0839sourcefiresnortEPSS score1.41%
The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remote attackers to evade detection of certain attacks, possibly related to IP option lengths.CVE-2006-5276snortsnort+1EPSS score79.44%
Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic.