NVD

Id
65474  
Name
CVE-2006-6931  
Description
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2007-01-16  
Modified Date
2010-09-15  
Seq
2006-6931  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
341414 65474 CVE-2006-6931 [dailydave] 20070110 Algorithmic Bugs  View
341415 65474 CVE-2006-6931 GLSA-200702-03  View
341416 65474 CVE-2006-6931 1017508  View
341417 65474 CVE-2006-6931 http://www.acsac.org/2006/abstracts/54.html  View
341418 65474 CVE-2006-6931 http://www.acsac.org/2006/advance_program.html  View
341419 65474 CVE-2006-6931 http://www.acsac.org/2006/papers/54.pdf  View
341420 65474 CVE-2006-6931 http://www.cs.wisc.edu/~smithr/pubs/acsac2006.pdf  View
341421 65474 CVE-2006-6931 http://www.cs.wisc.edu/~smithr/pubs/randy_smith_acsac2006.zip  View
341422 65474 CVE-2006-6931 MDKSA-2007:051  View
341423 65474 CVE-2006-6931 21991  View
341424 65474 CVE-2006-6931 http://www.snort.org/pub-bin/snortnews.cgi  View
341425 65474 CVE-2006-6931 snort-rule-matching-dos(31430)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56132 JVNDB-2007-004824 Snort におけるサービス運用妨害 (DoS) の脆弱性 Snort は、アルゴリズムの複雑性の不備があるため、特定のルールに適合しているか評価する際、サービス運用妨害 (CPU 消費、および検出停止) 状態となる脆弱性が存在します。 CVE-2006-6931 23033 CVE-2006-6931 65474 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004824.html 2007-01-16 2012-12-20 View