LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 10-19-2005, 01:33 AM   #1
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
Snort BO Preprocessor Vulnerability


A buffer overflow in the Snort BackOrifice preprocessor has been identified by Neel Mehta of ISS X-Force. Successful exploitation of the vuln can lead to arbitrary command execution with privileges of the Snort user. Users are advised to upgrade to version 2.4.3 or to disable the BO preprocessor. See the following advisories for more info:

http://www.us-cert.gov/cas/techalerts/TA05-291A.html
http://www.securityfocus.com/bid/15131
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Error when starting up snort: bash:!/bin/sh/usr/local/bin/snort :Eent not found cynthia_thomas Linux - Software 1 11-11-2005 02:59 PM
snort failed: snort: symbol lookup error: undefined symbol: usmAES192PrivProtocol Emmanuel_uk Linux - Security 1 07-10-2005 10:29 AM
No C++ preprocessor Mandrake 10.1 ? TotalDefiance Linux - Software 1 11-04-2004 10:41 PM
C preprocessor error mokojin Slackware 7 11-01-2004 02:56 AM
Can the C preprocessor do this? MadCactus Programming 2 08-24-2004 01:29 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 10:38 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration