Snort vulnerability "wormable" but not widespread

"The vulnerability exists in an update to the way the Snort intrusion
detection system handles network data produced by the BackOrifice program,
a seven-year-old remote administration tool used by online attackers to
control compromised systems."

http://www.securityfocus.com/news/11349?ref=rss

Michael

Imhotep wrote:

> "The vulnerability exists in an update to the way the Snort intrusion
> detection system handles network data produced by the BackOrifice program,
> a seven-year-old remote administration tool used by online attackers to
> control compromised systems."
>
> http://www.securityfocus.com/news/11349?ref=rss
>
> Michael

Sorry, after reading the article it was 10 days old. Here is the update.

"Patch roundup Wednesday became a busy patching day for sys admins with the
release of Oracle's quarterly patch roundup - boasting an impressive 85
software fixes - and an update designed to defend the popular Snort open
source intrusion detection application against possible hacker attack."

http://www.theregister.co.uk/2005/10/19/patch_roundup/

Imhotep