{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-01-07T00:00:00", "descriptions": [{"lang": "en", "value": "Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://labs.calyptix.com/advisories/CX-2007-01.txt"}, {"name": "ADV-2007-0152", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/0152"}, {"name": "32095", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/32095"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.snort.org/got_source/source.html"}, {"name": "1017507", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1017507"}, {"name": "33464", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/33464"}, {"name": "20070111 Calyptix Security Advisory CX-2007-001 - Snort 2.6.1.2 Integer Underflow Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/456598/100/0/threaded"}, {"name": "22004", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/22004"}, {"name": "2165", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/2165"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-0251", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://labs.calyptix.com/advisories/CX-2007-01.txt", "refsource": "MISC", "url": "http://labs.calyptix.com/advisories/CX-2007-01.txt"}, {"name": "ADV-2007-0152", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/0152"}, {"name": "32095", "refsource": "OSVDB", "url": "http://osvdb.org/32095"}, {"name": "http://www.snort.org/got_source/source.html", "refsource": "CONFIRM", "url": "http://www.snort.org/got_source/source.html"}, {"name": "1017507", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1017507"}, {"name": "33464", "refsource": "OSVDB", "url": "http://osvdb.org/33464"}, {"name": "20070111 Calyptix Security Advisory CX-2007-001 - Snort 2.6.1.2 Integer Underflow Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/456598/100/0/threaded"}, {"name": "22004", "refsource": "BID", "url": "http://www.securityfocus.com/bid/22004"}, {"name": "2165", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/2165"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-0251", "datePublished": "2007-01-16T23:00:00", "dateReserved": "2007-01-16T00:00:00", "dateUpdated": "2018-10-16T14:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:snort:snort:2.6.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "CE956C2B-8647-497B-A4C1-05A526629B97", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files."}, {"lang": "es", "value": "Desbordamiento inferior de entero en la funci\u00f3n DecodeGRE en src/decode.c en Snort 2.6.1.2 permite a atacantes remotos provocar referencias a ciertas localizaciones de memoria mediante paquetes GRE artesanales, lo cual puede causar la corrupci\u00f3n de ficheros de log o la escritura de informaci\u00f3n sensible en ficheros de log."}], "id": "CVE-2007-0251", "lastModified": "2018-10-16T16:32:03.433", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-01-16T23:28:00.000", "references": [{"source": "cve@mitre.org", "url": "http://labs.calyptix.com/advisories/CX-2007-01.txt"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/32095"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/33464"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/2165"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1017507"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/456598/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/22004"}, {"source": "cve@mitre.org", "url": "http://www.snort.org/got_source/source.html"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/0152"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}