CVE-2004-2652
Snort - Denial of Service via Invalid TCP/IP Options in DecodeTCPOptions
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-2652. PoCs published by Antimatt3r, Marcin Zgorecki.
AI-analyzed exploit summary This exploit targets a denial-of-service vulnerability in Snort's DecodeTCPOptions() function by sending a malformed TCP packet with specific options. The crafted packet triggers a crash in Snort, disrupting its functionality.
Description
The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remote attackers to cause a denial of service (crash) via packets with invalid TCP/IP options, which trigger a null dereference.
Exploits (2)
This exploit targets a denial-of-service vulnerability in Snort's DecodeTCPOptions() function by sending a malformed TCP packet with specific options. The crafted packet triggers a crash in Snort, disrupting its functionality.
This exploit targets a denial-of-service vulnerability in Snort's DecodeTCPOptions() function by sending a malformed TCP packet with an invalid MSS option. The PoC constructs a raw TCP packet with a crafted TCP option to trigger the crash.