Snort uses Back Orifice! Why?

[Bob151]

How secure is this? Isn't Back Orifice one of the poster children for virus sales and consulting hours generation?

Technical Details:
The Back Orifice preprocessor contains a stack-based buffer overflow. This vulnerability could be leveraged by an attacker to execute code remotely on a Snort sensor where the Back Orifice preprocessor is enabled. However, there are a number of factors that make remote code execution difficult to achieve across different builds of Snort on different platforms, even on the same platform with different compiler versions, and it is more likely that an attacker could use the vulnerability as a denial of service attack.

 

[n0cmonkey]

The Back Orifice preprocessor decodes packets to determine if they contain Back Orifice ping messages.

 

[Nothinman]

How secure is this? Isn't Back Orifice one of the poster children for virus sales and consulting hours generation?

Maybe you should read up on what the Back Orifice preprocessor actually does before claiming that snort uses BO.

 

[Bob151]

I didn't claim that it did, I quoted text from their website about a vulnerability in the Back Orifice preprocessor.

 

[MercenaryForHire]

Originally posted by: Bob151
I didn't claim that it did, I quoted text from their website about a vulnerability in the Back Orifice preprocessor.

Snort uses Back Orifice! Why?

Evidently you suck at reading.

- M4H

 

[Bob151]

Originally posted by: MercenaryForHire

Originally posted by: Bob151
I didn't claim that it did, I quoted text from their website about a vulnerability in the Back Orifice preprocessor.

Snort uses Back Orifice! Why?

Evidently you suck at reading.

- M4H

The title was a question, and wasn't far out of bounds with grammar.

http://grammar.ccc.commnet.edu/grammar/marks/exclamation.htm

An exclamation mark may be used to close questions that are meant to convey extreme emotion

When your done being rude, maybe you could read up on some grammar.

 

[n0cmonkey]

Originally posted by: Bob151

Originally posted by: MercenaryForHire

Originally posted by: Bob151
I didn't claim that it did, I quoted text from their website about a vulnerability in the Back Orifice preprocessor.

Snort uses Back Orifice! Why?

Evidently you suck at reading.

- M4H

The title was a question, and wasn't far out of bounds with grammar.

http://grammar.ccc.commnet.edu/grammar/marks/exclamation.htm

An exclamation mark may be used to close questions that are meant to convey extreme emotion

When your done being rude, maybe you could read up on some grammar.

The title appears to be a claim that snort uses back orifice, and asked why it did so. The answer is that it does not use back orifice at all, it checks for traffic relating to back orifice, as an IDS should. This would have been evident if you checked the documentation, like any professional would.

 

[Nothinman]

When your done being rude, maybe you could read up on some grammar.

You're going to tell him to read up on grammar when you couldn't even be bothered to check the documentation for the product you posted about?

 

[Bulldog13]

You guys are brutal