CVE-2006-2769 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2006-2769
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-2769

Description: The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return (\r) after the URL and before the HTTP declaration.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/26855 SUSE http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html ST 1016191 SREASON http://securityreason.com/securityalert/1018 SAID Secunia Advisory: SA20413 Secunia Advisory: SA20766 OSVDB 25837 MLIST http://marc.theaimsgroup.com/?l=snort-devel&m=114909074311462&w=2 MISC http://www.demarc.com/support/downloads/patch_20060531 CONFIRM http://www.snort.org/pub-bin/snortnews.cgi#431 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/435872/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/435797/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/435734/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/435600/100/0/threaded BID 18200

Return to the previous page.