It has been reported that Snort is prone to a weakness that may cause an analyst or the correlation engine to improperly identify a signature. It has been reported that due to unspecified circumstances, the application may incorrectly classify network traffic with a "MS-SQL Worm propagation attempt" label or other labels. Under some circumstances, misreported traffic may be incorrectly flagged as innocuous. Snort versions 2.0.6 and 2.1.0 have been reported to be prone to this weakness.
It has been reported that Snort is prone to a weakness that may cause an analyst or the correlation engine to improperly identify a signature. It has been reported that due to unspecified circumstances, the application may incorrectly classify network traffic with a "MS-SQL Worm propagation attempt" label or other labels. Under some circumstances, misreported traffic may be incorrectly flagged as innocuous. Snort versions 2.0.6 and 2.1.0 have been reported to be prone to this weakness.