Login Request a demo
Unscored severity · published Feb 20, 2007
CVE-2006-5276
Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute…
–
CVSS
79.4%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic.
Exploitation
Is it being used?
Exploit prediction (EPSS)79.4% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
Intrusion Sensor · Sourcefire
4.1; 4.1; 4.5; 4.5; 4.6; 4.6 · source: NVD
SN
Snort · Snort
through 2.6.1.2; 2.6.1; 2.6.1.1; 2.7_beta1 · source: NVD
Affected product
SN
Snort
Snort
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5276
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5276
fedoranews.org
http://fedoranews.org/updates/FEDORA-2007-206.shtml
Vendor Advisory
http://iss.net/threats/257.html
secunia.com
http://secunia.com/advisories/24190
secunia.com
http://secunia.com/advisories/24235
secunia.com
http://secunia.com/advisories/24239
secunia.com
http://secunia.com/advisories/24240
More from Snort
8.8
CVE-2016-1417
Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tcapi.dll that is…
7.5
CVE-2021-40114
Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remote attacker to cause…
7.5
CVE-2021-1223
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for…
5.8
CVE-2020-3299
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured File Policy for…
5.3
CVE-2023-20246
Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on…