National Cyber Awareness System

Vulnerability Summary for CVE-2005-3252

Overview

Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a crafted UDP packet.

Impact

CVSS Severity (version 2.0 incomplete approximation):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA05-291A

Name: TA05-291A

Type: Advisory; Patch Information

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA05-291A.html

US-CERT Vulnerability Note: VU#175500

Name: VU#175500

Type: Advisory; Patch Information

Hyperlink:http://www.kb.cert.org/vuls/id/175500

External Source: ISS

Name: 20051018 Snort Back Orifice Parsing Remote Code Execution

Type: Advisory

Hyperlink:http://xforce.iss.net/xforce/alerts/id/207

External Source: CONFIRM

Name: http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=363396&RenditionID=

Hyperlink:http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=363396&RenditionID=

External Source: CONFIRM

Name: http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=362187&RenditionID=

Hyperlink:http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=362187&RenditionID=

External Source: VUPEN

Name: ADV-2005-2138

Hyperlink:http://www.vupen.com/english/advisories/2005/2138

External Source: CONFIRM

Name: http://www.snort.org/docs/change_logs/2.4.3/Changelog.txt

Hyperlink:http://www.snort.org/docs/change_logs/2.4.3/Changelog.txt

External Source: BID

Name: 15131

Hyperlink:http://www.securityfocus.com/bid/15131

External Source: OSVDB

Name: 20034

Hyperlink:http://www.osvdb.org/20034

External Source: SECTRACK

Name: 1015070

Hyperlink:http://securitytracker.com/id?1015070

External Source: SECUNIA

Name: 17559

Hyperlink:http://secunia.com/advisories/17559

External Source: SECUNIA

Name: 17255

Hyperlink:http://secunia.com/advisories/17255

External Source: SECUNIA

Name: 17220

Hyperlink:http://secunia.com/advisories/17220

External Source: FULLDISC

Name: 20051101 Snort Back Orifice Preprocessor Exploit (Win32 targets)

Hyperlink:http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0010.html

External Source: FULLDISC

Name: 20051025 Snort's BO pre-processor exploit

Hyperlink:http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0505.html