Total vulnerabilities in the database
The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return (\r) after the URL and before the HTTP declaration.
| Software | From | Fixed in |
|---|---|---|
| sourcefire / snort | 2.4.3 | 2.4.3.x |
| sourcefire / snort | 2.4.2 | 2.4.2.x |
| sourcefire / snort | 2.4 | 2.4.x |
| sourcefire / snort | 2.4.1 | 2.4.1.x |
| sourcefire / snort | 2.4.4 | 2.4.4.x |