PatchTheCVEsourcefire vulnerabilities
Recent CVEs affecting sourcefire products. 8 tracked.
sourcefire has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2010-06-16. Highest priority: CVE-2006-5276 (score 65/100).
- CVE-2010-2306 MEDIUM 4.3 MITIGATE MITIGATE The default installation of Sourcefire 3D Sensor 1000, 2000, and 9900; and Defense Center 1000; uses the same
- CVE-2009-2344 HIGH 9.0 UPGRADE UPGRADE The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote
- CVE-2006-5276 HIGH 10.0 UPGRADE DOWNGRADE Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and So
- CVE-2006-2769 MEDIUM 5.0 DOWNGRADE The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "u
- CVE-2006-0839 MEDIUM 5.0 DOWNGRADE The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with
- CVE-2005-3252 HIGH 7.5 DOWNGRADE Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attacke
- CVE-2004-2652 HIGH 7.8 DOWNGRADE The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST outpu
- CVE-2003-0209 HIGH 10.0 DOWNGRADE DOWNGRADE Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attacke
FAQ
How do I fix sourcefire vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sourcefire being exploited right now?
None of the tracked sourcefire CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sourcefire CVE should I patch first?
CVE-2006-5276 currently ranks highest (65/100): Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and So.