Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2006-5276
HistoryFeb 20, 2007 - 1:28 a.m.

CVE-2006-5276

2007-02-2001:28:00
[email protected]
web.nvd.nist.gov
1

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.71

Percentile

98.1%

JSON

Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic.

Affected configurations

Nvd
Node
snortsnortRange≤2.6.1.2
OR
snortsnortMatch2.6.1
OR
snortsnortMatch2.6.1.1
OR
snortsnortMatch2.7_beta1
OR
sourcefireintrusion_sensorMatch4.1
OR
sourcefireintrusion_sensorMatch4.1crossbeam
OR
sourcefireintrusion_sensorMatch4.5
OR
sourcefireintrusion_sensorMatch4.5crossbeam
OR
sourcefireintrusion_sensorMatch4.6
OR
sourcefireintrusion_sensorMatch4.6crossbeam
VendorProductVersionCPE
snortsnort*cpe:2.3:a:snort:snort:*:*:*:*:*:*:*:*
snortsnort2.6.1cpe:2.3:a:snort:snort:2.6.1:*:*:*:*:*:*:*
snortsnort2.6.1.1cpe:2.3:a:snort:snort:2.6.1.1:*:*:*:*:*:*:*
snortsnort2.7_beta1cpe:2.3:a:snort:snort:2.7_beta1:*:*:*:*:*:*:*
sourcefireintrusion_sensor4.1cpe:2.3:a:sourcefire:intrusion_sensor:4.1:*:*:*:*:*:*:*
sourcefireintrusion_sensor4.1cpe:2.3:a:sourcefire:intrusion_sensor:4.1:*:crossbeam:*:*:*:*:*
sourcefireintrusion_sensor4.5cpe:2.3:a:sourcefire:intrusion_sensor:4.5:*:*:*:*:*:*:*
sourcefireintrusion_sensor4.5cpe:2.3:a:sourcefire:intrusion_sensor:4.5:*:crossbeam:*:*:*:*:*
sourcefireintrusion_sensor4.6cpe:2.3:a:sourcefire:intrusion_sensor:4.6:*:*:*:*:*:*:*
sourcefireintrusion_sensor4.6cpe:2.3:a:sourcefire:intrusion_sensor:4.6:*:crossbeam:*:*:*:*:*

References

Related

securityvulns 2
cert 1
nessus 3
fedora 1
openvas 6
canvas 1
gentoo 1
cve 1
exploitdb 4
cvelist 1
exploitpack 1
saint 4
checkpoint_advisories 1
packetstorm 2
debiancve 1
zdt 3
freebsd 1
ubuntucve 1
metasploit 1
seebug 1
securityvulns
securityvulns
snort IDS buffer overflow
2007-02-20 00:00:00
US-CERT Technical Cyber Security Alert TA07-050A -- Sourcefire Snort DCE/RPC Preprocessor Buffer Overflow
2007-02-20 00:00:00
cert
cert
Sourcefire Snort DCE/RPC preprocessor does not properly reassemble fragmented packets
2007-02-19 00:00:00
nessus
nessus
FreeBSD : snort -- DCE/RPC preprocessor vulnerability (afdf500f-c1f6-11db-95c5-000c6ec775d9)
2007-02-22 00:00:00
GLSA-200703-01 : Snort: Remote execution of arbitrary code
2007-03-02 00:00:00
Fedora 7 : snort-2.7.0.1-3.fc7 (2007-2060)
2007-11-06 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: snort-2.7.0.1-3.fc7
2007-09-07 17:20:21
openvas
openvas
Gentoo Security Advisory GLSA 200703-01 (snort)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200703-01 (snort)
2008-09-24 00:00:00
Fedora Update for snort FEDORA-2007-2060
2009-02-27 00:00:00
canvas
canvas
Immunity Canvas: SNORTRPC
2007-02-20 01:28:00
gentoo
gentoo
Snort: Remote execution of arbitrary code
2007-02-23 00:00:00
cve
cve
CVE-2006-5276
2007-02-20 01:28:00
exploitdb
exploitdb
Snort 2.6.1 - DCE/RPC Preprocessor Remote Buffer Overflow
2007-03-01 00:00:00
Snort 2.6.1 (Linux) - DCE/RPC Preprocessor Remote Buffer Overflow
2007-03-30 00:00:00
Snort 2.6.1 - DCE/RPC Preprocessor Remote Buffer Overflow (Denial of Service) (PoC)
2007-02-23 00:00:00
cvelist
cvelist
CVE-2006-5276
2007-02-20 00:00:00
exploitpack
exploitpack
Snort 2.6.1 (Linux) - DCERPC Preprocessor Remote Buffer Overflow
2007-03-30 00:00:00
saint
saint
Snort DCE/RPC preprocessor buffer overflow
2007-07-09 00:00:00
Snort DCE/RPC preprocessor buffer overflow
2007-07-09 00:00:00
Snort DCE/RPC preprocessor buffer overflow
2007-07-09 00:00:00
checkpoint_advisories
checkpoint_advisories
Preemptive Protection against Sourcefire Intrusion Sensor and Snort DCE/RPC Preprocessor Buffer Overflow Vulnerability
2007-03-29 00:00:00
packetstorm
packetstorm
Snort 2 DCE/RPC Preprocessor Buffer Overflow
2012-04-10 00:00:00
snort-py.txt
2007-02-24 00:00:00
debiancve
debiancve
CVE-2006-5276
2007-02-20 01:28:00
zdt
zdt
Snort 2 DCE/RPC preprocessor Buffer Overflow
2012-06-06 00:00:00
Snort 2 DCE/RPC preprocessor Buffer Overflow
2012-04-09 00:00:00
Snort 2.6.1 DCE/RPC Preprocessor Remote Buffer Overflow Exploit (linux)
2007-03-30 00:00:00
freebsd
freebsd
snort -- DCE/RPC preprocessor vulnerability
2007-02-19 00:00:00
ubuntucve
ubuntucve
CVE-2006-5276
2007-02-20 00:00:00
metasploit
metasploit
Snort 2 DCE/RPC Preprocessor Buffer Overflow
2012-06-05 11:14:40
seebug
seebug
Snort 2.6.1 DCE/RPC Preprocessor Remote Buffer Overflow Exploit (linux)
2007-04-03 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.71

Percentile

98.1%

JSON
Related for NVD:CVE-2006-5276
securityvulns2cert1nessus3fedora1openvas6canvas1gentoo1cve1exploitdb4cvelist1exploitpack1saint4checkpoint_advisories1packetstorm2debiancve1zdt3freebsd1ubuntucve1metasploit1seebug1