← back
CVE-2006-2769

CVE-2006-2769

EPSS 10.6%
The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return (\r) after the URL and before the HTTP declaration.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/27931unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.htmlhttp://marc.info/?l=snort-devel&m=114909074311462&w=2http://secunia.com/advisories/20413http://secunia.com/advisories/20766http://securityreason.com/securityalert/1018http://securitytracker.com/id?1016191https://exchange.xforce.ibmcloud.com/vulnerabilities/26855http://www.demarc.com/support/downloads/patch_20060531http://www.osvdb.org/25837http://www.securityfocus.com/archive/1/435600/100/0/threadedhttp://www.securityfocus.com/archive/1/435734/100/0/threadedhttp://www.securityfocus.com/archive/1/435797/100/0/threaded