CVE-2006-5276

2007-02-2001:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-5276

buffer overflow

dce/rpc

snort

sourcefire intrusion sensor

smb traffic

nvd

7.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.71 High

EPSS

Percentile

98.0%

JSON

Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic.

CPENameOperatorVersion
snort:snortsnorteq2.6.1
sourcefire:intrusion_sensorsourcefire intrusion sensoreq4.6
sourcefire:intrusion_sensorsourcefire intrusion sensoreq4.5
sourcefire:intrusion_sensorsourcefire intrusion sensoreq4.1
snort:snortsnortle2.6.1.2
snort:snortsnorteq2.6.1.1
snort:snortsnorteq2.7_beta1

CPE	Name	Operator	Version
snort:snort	snort	eq	2.6.1
sourcefire:intrusion_sensor	sourcefire intrusion sensor	eq	4.6
sourcefire:intrusion_sensor	sourcefire intrusion sensor	eq	4.5
sourcefire:intrusion_sensor	sourcefire intrusion sensor	eq	4.1
snort:snort	snort	le	2.6.1.2
snort:snort	snort	eq	2.6.1.1
snort:snort	snort	eq	2.7_beta1