Snort URIContent Rules Detection Evasion Vulnerability

Solution:
The vendor has released version 2.4.5 to address this issue.

Third-party patches and updated Snort packages are available from Demarc Threat Research Team.

Further information from Sigint Consulting suggests that the patches available from Demarc may not completely fix this issue.

Please see the referenced third-party vendor advisories for more information.


Snort Project Snort 2.4 .0

Snort Project Snort 2.4.1

Snort Project Snort 2.4.2

Snort Project Snort 2.4.3

Snort Project Snort 2.4.4


 

Privacy Statement
Copyright 2010, SecurityFocus