CVE-2000-1226: Medium severity Snort Snort vulnerability

Published Dec 31, 2000

Updated

Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service (crash) by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan.

Affected Software

1 affected component

Snort Snort=1.6

Remediation

Patch Available

http://archives.neohapsis.com/archives/bugtraq/2000-06/0126.html

Event History

Dec 31, 2000

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

Jun 21, 2005

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-1226?

CVE-2000-1226 is classified as a denial of service vulnerability that can crash Snort 1.6.

How do I fix CVE-2000-1226?

To mitigate CVE-2000-1226, upgrade to a later version of Snort that addresses this vulnerability.

Which versions of Snort are affected by CVE-2000-1226?

CVE-2000-1226 affects Snort versions prior to 1.6 when running in specific logging modes.

What type of attack can exploit CVE-2000-1226?

CVE-2000-1226 can be exploited through the sending of non-IP protocols to cause a denial of service.

How can I detect if my system is affected by CVE-2000-1226?

You can detect if your system is affected by CVE-2000-1226 by checking for the presence of Snort version 1.6 and its logging configurations.