CVE

Id
23035  
CVE No.
CVE-2006-6931  
Status
Candidate  
Description
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."  
Phase
Assigned (20070116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
222434 23035 CVE-2006-6931 MLIST:[dailydave] 20070110 Algorithmic Bugs  View
222435 23035 CVE-2006-6931 URL:http://lists.immunitysec.com/pipermail/dailydave/2007-January/003954.html  View
222436 23035 CVE-2006-6931 MISC:http://www.acsac.org/2006/abstracts/54.html  View
222437 23035 CVE-2006-6931 MISC:http://www.acsac.org/2006/advance_program.html  View
222438 23035 CVE-2006-6931 MISC:http://www.acsac.org/2006/papers/54.pdf  View
222439 23035 CVE-2006-6931 MISC:http://www.cs.wisc.edu/~smithr/pubs/acsac2006.pdf  View
222440 23035 CVE-2006-6931 MISC:http://www.cs.wisc.edu/~smithr/pubs/randy_smith_acsac2006.zip  View
222441 23035 CVE-2006-6931 CONFIRM:http://www.snort.org/pub-bin/snortnews.cgi  View
222442 23035 CVE-2006-6931 GENTOO:GLSA-200702-03  View
222443 23035 CVE-2006-6931 URL:http://security.gentoo.org/glsa/glsa-200702-03.xml  View
222444 23035 CVE-2006-6931 MANDRIVA:MDKSA-2007:051  View
222445 23035 CVE-2006-6931 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:051  View
222446 23035 CVE-2006-6931 BID:21991  View
222447 23035 CVE-2006-6931 URL:http://www.securityfocus.com/bid/21991  View
222448 23035 CVE-2006-6931 OSVDB:32096  View
222449 23035 CVE-2006-6931 URL:http://www.osvdb.org/32096  View
222450 23035 CVE-2006-6931 SECTRACK:1017508  View
222451 23035 CVE-2006-6931 URL:http://securitytracker.com/id?1017508  View
222452 23035 CVE-2006-6931 SECUNIA:23716  View
222453 23035 CVE-2006-6931 URL:http://secunia.com/advisories/23716  View
222454 23035 CVE-2006-6931 SECUNIA:24164  View
222455 23035 CVE-2006-6931 URL:http://secunia.com/advisories/24164  View
222456 23035 CVE-2006-6931 SECUNIA:24338  View
222457 23035 CVE-2006-6931 URL:http://secunia.com/advisories/24338  View
222458 23035 CVE-2006-6931 XF:snort-rule-matching-dos(31430)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52547 JVNDB-2007-001239 Easy Chat Server における特定のファイルをダウンロードされる脆弱性 Easy Chat Server には、不十分なアクセスコントロールで Web ルート配下に重要な情報を格納するため、特定のファイルをダウンロードされる脆弱性が存在します。 CVE-2006-6933 23035 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001239.html  View