pfSense CE Snort Package File Enumeration Vulnerability

A file enumeration vulnerability has been identified in the Snort package of pfSense CE. The issue arises in the 'snort_ip_reputation.php' file, where the 'iplist' parameter is not properly sanitized to remove directory traversal characters before checking if a file exists. Although the contents of the file cannot be accessed, the server discloses whether a file exists, enabling an attacker to enumerate files on the target system. This vulnerability affects authenticated users with 'WebCfg - Services: Snort package' permissions.

Impact

Exploitation of this vulnerability allows for unauthorized file enumeration on the pfSense CE system.

Remediation

A new package build has been published and is available for pfSense CE 2.8.1 and 2.8.0.