NetSight
IP …
critical10.0Public exploit code

CVE-2006-5276

Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attacker…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic.

Affected products

VendorProductAffected versions
SnortSnort
through 2.6.1.2
Versions 2.6.1, 2.6.1.1, 2.7_beta1
SourcefireIntrusion Sensor
Versions 4.1, 4.5, 4.6

References