CVE-2006-5276

EPSS 79.3%

Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic.

Affected products

n/a · n/a

public PoCs found — 4

exploitdbwww.exploit-db.com/exploits/3609unverified cve_referencewww.exploit-db.com/exploits/3362unverified exploitdbwww.exploit-db.com/exploits/18723unverified exploitdbwww.exploit-db.com/exploits/3391unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://fedoranews.org/updates/FEDORA-2007-206.shtml http://iss.net/threats/257.html https://bugzilla.redhat.com/show_bug.cgi?id=229265 http://secunia.com/advisories/24190 http://secunia.com/advisories/24235 http://secunia.com/advisories/24239 http://secunia.com/advisories/24240 http://secunia.com/advisories/24272 http://secunia.com/advisories/26746 http://security.gentoo.org/glsa/glsa-200703-01.xml https://exchange.xforce.ibmcloud.com/vulnerabilities/31275 https://www.exploit-db.com/exploits/3362