Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
SNORT Incorrect fragmented packet reassembly
Date: Fri Feb 17 2006 - 08:51:46 CST
Snort 2.4.3 has a bug in processing fragmented ip packets which has ip options. frag3 preprocessor of snort skips [ip_option_length] bytes from end of the ip options when reassembling packet, thus allowing anyone to evade ids.
Guys at snort.org already informed and are fixing the problem.