Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2005-3252

EPSS 83.78% · P99
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2005-3252

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a crafted UDP packet.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Snort Back Orifice预处理器远程栈溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Snort是Snort团队的一套网络入侵预防软件与网络入侵检测软件。该软件提供数据包嗅探、数据包分析和数据包检测等功能。很多其他IDS产品中也使用了Snort及其组件。 Snort的Back Orifice ping预处理模块存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在Snort探测器上执行任意指令。 Snort预处理器是一些模块化的插件，通过在运行检测引擎前操作报文来扩展功能。Back Orifice预处理器解码报文以判断报文中是否包含有Back Orifice ping消息。ping检测代码未能充分
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2005-3252

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2005-3252

请登录查看更多情报信息。

Same Patch Batch · n/a · 2005-10-18 · 7 CVEs total

CVE-2005-2969OpenSSL不安全的协议协商漏洞
CVE-2005-2978NetPBM PNMToPNG缓冲区溢出漏洞
CVE-2005-3254Debian CGIwrap program UID设置漏洞
CVE-2005-3255Debian GNU/Linux cgiwrap包 敏感信息泄露漏洞
CVE-2005-3256Mozilla Enigmail不正确加密密钥选择漏洞
CVE-2005-3257Linux Kernel控制台键盘映射本地命令注入漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2005-3252

No comments yet

Leave a comment