CVE-2000-1226

MediumCVSS 5.0/10Last modified Sep 23, 2026

Description

Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service (crash) by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-06/0122.htmlVendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-06/0126.htmlPatch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-06/0122.htmlVendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-06/0126.htmlPatch, Vendor Advisory

Timeline

Published: Dec 31, 2000
Last modified: Sep 23, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-12275.0Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB CVE-2000-12285.0Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that set CVE-2000-12295.0Directory traversal vulnerability in Phorum 3.0.7 allows remote Phorum administrators to read arbitrary files via ".." (dot dot) sequences i CVE-2000-12305.0Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER para CVE-2000-12315.0code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string.CVE-2000-12325.0upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method.CVE-2000-12337.5SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary SQL queries via the CVE-2000-12345.0violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by s CVE-2000-12355.0The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow rem CVE-2000-12367.5SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbi CVE-2000-12375.0The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determ CVE-2000-12387.5BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet