Snort Time To Live Fragment Reassembly Security Bypass Weakness

Bugtraq ID:	29327
Class:	Design Error
CVE:	CVE-2008-1804
Remote:	Yes
Local:	No
Published:	May 21 2008 12:00AM
Updated:	Dec 14 2009 07:43PM
Credit:	Silvio Cesare
Vulnerable:	Snort Project Snort 2.6 Snort Project Snort 2.8 Red Hat Fedora 9 Red Hat Fedora 8 Red Hat Fedora 7 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 IPCop IPCop 1.4.18 IPCop IPCop 1.4.17 IPCop IPCop 1.4.16 IPCop IPCop 1.4.15 IPCop IPCop 1.4.14 IPCop IPCop 1.4.13 IPCop IPCop 1.4.12 IPCop IPCop 1.4.11 IPCop IPCop 1.4.10

Not Vulnerable:	Snort Project Snort 2.8.1 IPCop IPCop 1.4.20 IPCop IPCop 1.4.19