CVSS: 10.0EPSS: 64%CPEs: 11EXPL: 2CVE-2003-0209 – Snort 1.9.1 - 'p7snort191.sh' Remote Command Execution
https://notcve.org/view.php?id=CVE-2003-0209
16 Apr 2003 — Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow. Desbordamiento de enteros en el modulo de reensamblaje TCP (stream4) de Snort 2.0 y anteriores permite a atacantes remotos ejecutar código arbitrario mediante números de secuencia largo en paquetes, lo que permite un desbordamiento de búfer basado en el montón. • https://www.exploit-db.com/exploits/18 •
CVSS: 10.0EPSS: 51%CPEs: 9EXPL: 0CVE-2003-0033
https://notcve.org/view.php?id=CVE-2003-0033
07 Mar 2003 — Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets. Desbordamiento de búfer en el preprocesador RPC de Snort 1.8 y 1.9.x anteriores a la 1.9.1 permite a atacantes remotos la ejecución arbitraria de código mediante paquetes RPC fragmentados. • http://marc.info/?l=bugtraq&m=104673386226064&w=2 •
CVSS: 7.5EPSS: 5%CPEs: 1EXPL: 2CVE-2002-0115 – Snort 1.8.3 - ICMP Denial of Service
https://notcve.org/view.php?id=CVE-2002-0115
25 Mar 2002 — Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service (crash and core dump) via a malformed ICMP packet. El snort 1.8.3 no define correctamente el tamaño mínimo de cabecera ICMP, que permite a atacantes remotos causar una negación de servicio (crash y core dump) vía un paquete mal formado ICMP. • https://www.exploit-db.com/exploits/21213 •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2001-1558
https://notcve.org/view.php?id=CVE-2001-1558
31 Dec 2001 — Unknown vulnerability in IP defragmenter (frag2) in Snort before 1.8.3 allows attackers to cause a denial of service (crash). • http://archives.neohapsis.com/archives/snort/2001-11/0990.html •
CVSS: 7.5EPSS: 14%CPEs: 8EXPL: 1CVE-2001-0669 – Cisco Secure IDS 2.0/3.0 / Snort 1.x / ISS RealSecure 5/6 / NFR 5.0 - Encoded IIS Detection Evasion
https://notcve.org/view.php?id=CVE-2001-0669
12 Oct 2001 — Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard "%u" Unicode encoding of ASCII characters in the requested URL. • https://www.exploit-db.com/exploits/21100 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2000-1226
https://notcve.org/view.php?id=CVE-2000-1226
31 Dec 2000 — Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service (crash) by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan. • http://archives.neohapsis.com/archives/bugtraq/2000-06/0122.html •