Open-source intrusion detector found to be flawed

[anandk]

Snort, the open-source intrusion-detection software, is vulnerable to hackers, its developers said this week.

Snort's popularity has grown as many businesses have been tempted away from expensive proprietary intrusion-detection systems. Advocates of Snort argue that it is more secure than products created by network gear makers such as Cisco Systems because its code is open for developers to both find and fix flaws.

But on Monday, Sourcefire, the company behind Snort, said that hackers could potentially execute malicious code on a system running Snort and gain access to confidential data.

more on zdnet

[freebird]

Thought open source =fast bugfixes/patches...Y?

[borg]

Open source/closed source doesn't matter. The only thing that matters are the people behind the project. If they screw up, then the program is screwed.