NVD

Id
1744  
Name
CVE-2008-1804  
Description
preprocessors/spp_frag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, which allows remote attackers to bypass detection rules by using a different TTL for each fragment.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-05-22  
Modified Date
2011-03-07  
Seq
2008-1804  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
11251 1744 CVE-2008-1804 http://cvs.snort.org/viewcvs.cgi/snort/ChangeLog?rev=1.534.2.11  View
11252 1744 CVE-2008-1804 http://cvs.snort.org/viewcvs.cgi/snort/src/preprocessors/spp_frag3.c.diff?r1=text&tr1=1.46.2.4&r2=text&tr2=1.46.2.5&diff_format=h  View
11253 1744 CVE-2008-1804 20080521 Multiple Vendor Snort IP Fragment TTL Evasion Vulnerability  View
11254 1744 CVE-2008-1804 1020081  View
11255 1744 CVE-2008-1804 http://www.ipcop.org/index.php?name=News&file=article&sid=40  View
11256 1744 CVE-2008-1804 29327  View
11257 1744 CVE-2008-1804 ADV-2008-1602  View
11258 1744 CVE-2008-1804 snort-ttl-security-bypass(42584)  View
11259 1744 CVE-2008-1804 FEDORA-2008-4986  View
11260 1744 CVE-2008-1804 FEDORA-2008-5001  View
11261 1744 CVE-2008-1804 FEDORA-2008-5045  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46080 JVNDB-2008-001390 Snort の preprocessors/spp_frag3.c における検出ルールを回避可能な脆弱性 Sourcefire の Snort における preprocessors/spp_frag3.c には、異なる TTL 値を含むパケットフラグメントを適切に処理しないため、検出ルールを回避される脆弱性が存在します。 CVE-2008-1804 31917 CVE-2008-1804 1744 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001390.html 2008-05-22 2008-06-19 View