DIGIT-ARC read-only archive · snapshot: July 23, 2026

Open-source intrusion detector found to be flawed

3 posts · originally from https://geek.digit.in/community/threads/open-source-intrusion-detector-found-to-be-flawed.50471/

anandk
anandk Original post #1
Feb 23, 2007 at 11:18 PM
Snort, the open-source intrusion-detection software, is vulnerable to hackers, its developers said this week.

Snort's popularity has grown as many businesses have been tempted away from expensive proprietary intrusion-detection systems. Advocates of Snort argue that it is more secure than products created by network gear makers such as Cisco Systems because its code is open for developers to both find and fix flaws.

But on Monday, Sourcefire, the company behind Snort, said that hackers could potentially execute malicious code on a system running Snort and gain access to confidential data.

more on zdnet
freebird
Feb 23, 2007 at 11:26 PM
Thought open source =fast bugfixes/patches...Y? :(
B
borg #3
Feb 24, 2007 at 6:28 PM
Open source/closed source doesn't matter. The only thing that matters are the people behind the project. If they screw up, then the program is screwed.