CVE-2006-5276 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2006-5276
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-5276

Description: Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/31275 ST 1017670 1017669 SAID Secunia Advisory: SA24190 Secunia Advisory: SA24235 Secunia Advisory: SA24239 Secunia Advisory: SA24240 Secunia Advisory: SA24272 Secunia Advisory: SA26746 OSVDB 32094 MISC MILW0RM http://www.milw0rm.com/exploits/3362 ISS http://iss.net/threats/257.html GENTOO http://security.gentoo.org/glsa/glsa-200703-01.xml FEDORA http://fedoranews.org/updates/FEDORA-2007-206.shtml CONFIRM http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=540173 http://www116.nortelnetworks.com/pub/repository/CLARIFY/DOCUMENT/2007/08/021923-01.pdf http://www.snort.org/docs/advisory-2007-02-19.html CERT-VN 196240 CERT http://www.us-cert.gov/cas/techalerts/TA07-050A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/461810/100/0/threaded BID 22616

Return to the previous page.