CVE-2006-0839: Medium severity Sourcefire Snort vulnerability
The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remote attackers to evade detection of certain attacks, possibly related to IP option lengths.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0839?
CVE-2006-0839 is considered a medium severity vulnerability that allows attackers to evade detection in certain scenarios.
How do I fix CVE-2006-0839?
To fix CVE-2006-0839, upgrade to a newer version of Snort that addresses the vulnerability beyond 2.4.3.
What specific software is affected by CVE-2006-0839?
CVE-2006-0839 specifically affects Sourcefire Snort version 2.4.3.
What type of attacks can CVE-2006-0839 allow remote attackers to evade?
CVE-2006-0839 may allow remote attackers to evade detection of attacks that involve fragmented packets with specific IP options.
Is there a workaround for CVE-2006-0839?
There are no official workarounds for CVE-2006-0839, and upgrading to a more secure version is recommended.