Description
Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service (crash) by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan.
References
- 20000614 Snort 1.6 and nmap 2.54beta1 mailing-list
- 20000614 Re: Snort 1.6 and nmap 2.54beta1 mailing-list