SO
Vendor
Sourcefire
12
CVEs
0
On KEV
0
New 30D
Products
SN–
Snort
Sourcefire
5 CVEs0 on KEV0 new
3S–
3d Sensor
Sourcefire
1 CVEs0 on KEV0 new
3D–
3d1000
Sourcefire
1 CVEs0 on KEV0 new
3D–
3d2000
Sourcefire
1 CVEs0 on KEV0 new
3D–
3d9900
Sourcefire
1 CVEs0 on KEV0 new
DC–
Dc1000
Sourcefire
1 CVEs0 on KEV0 new
DC–
Defense Center
Sourcefire
1 CVEs0 on KEV0 new
IS–
Intrusion Sensor
Sourcefire
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2010-2306 | 3D 3d1000 Sourcefire | – | Jun 16 | The default installation of Sourcefire 3D Sensor 1000, 2000, and 9900; and Defense Center 1000; uses the same static, private SSL keys for multiple devices and installations,… |
| CVE-2009-2344 | 3S 3d Sensor Sourcefire | – | Jul 7 | The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote authenticated users to gain privileges via a $admin value for the… |
| CVE-2006-5276 | IS Intrusion Sensor Sourcefire | – | Feb 20 | Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute… |
| CVE-2006-2769 | SN Snort Sourcefire | – | Jun 2 | The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return (\r) after the URL and before… |
| CVE-2006-0839 | SN Snort Sourcefire | – | Feb 22 | The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remote attackers to evade detection of… |
| CVE-2005-3252 | SN Snort Sourcefire | – | Oct 18 | Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a crafted UDP packet |
| CVE-2004-2652 | SN Snort Sourcefire | – | Dec 31 | The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remote attackers to cause a denial of… |
| CVE-2003-0209 | SN Snort Sourcefire | – | May 5 | Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets,… |