[Snort-devel] [ snort-Bugs-741138 ] snort-2.0.0: Crash on fragmented packets from Nmap

SourceForge.net noreply at ...12...
Thu May 22 05:28:05 EDT 2003


Bugs item #741138, was opened at 2003-05-21 14:21
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=103357&aid=741138&group_id=3357

Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Jon Werrett (werrettt)
Assigned to: Nobody/Anonymous (nobody)
Summary: snort-2.0.0: Crash on fragmented packets from Nmap

Initial Comment:
Nmap can crash snort by using fragmented portscans.

example: 
nmap -f -sS <host>

In verbose mode snort spits out:
ERROR: OpenSessionFile() => fopen((null)) session file:
File exists
Fatal Error, Quitting..


nmap version: 3.27

snort version: Version 2.0.0 (Build 72)

Ethernet dmesg:
eth0: Lite-On 82c168 PNIC rev 32 at 0xc800,
00:A0:CC:D0:F9:21, IRQ 9.

uname -a:
Linux euler 2.4.20-gentoo-r2 #3 SMP Tue Apr 8 23:57:17
WST 2003 i686 Pentium III (Coppermine) 

gcc version: 2.95.3

I'm not using any aggressive compiler optimisations
either (-03).

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=103357&aid=741138&group_id=3357




More information about the Snort-devel mailing list