CVE-2006-5276

2007-02-2001:28:00

[email protected]

web.nvd.nist.gov

cve-2006-5276

buffer overflow

dce/rpc

snort

sourcefire intrusion sensor

smb traffic

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.71 High

EPSS

Percentile

98.1%

JSON

Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic.

Affected configurations

NVD

Node

snortsnortRange≤2.6.1.2

snortsnortMatch2.6.1

snortsnortMatch2.6.1.1

snortsnortMatch2.7_beta1

sourcefireintrusion_sensorMatch4.1

sourcefireintrusion_sensorMatch4.1crossbeam

sourcefireintrusion_sensorMatch4.5

sourcefireintrusion_sensorMatch4.5crossbeam

sourcefireintrusion_sensorMatch4.6

sourcefireintrusion_sensorMatch4.6crossbeam

CPENameOperatorVersion
snort:snortsnortle2.6.1.2
snort:snortsnorteq2.6.1
snort:snortsnorteq2.6.1.1
snort:snortsnorteq2.7_beta1
sourcefire:intrusion_sensorsourcefire intrusion sensoreq4.1
sourcefire:intrusion_sensorsourcefire intrusion sensoreq4.5
sourcefire:intrusion_sensorsourcefire intrusion sensoreq4.6

CPE	Name	Operator	Version
snort:snort	snort	le	2.6.1.2
snort:snort	snort	eq	2.6.1
snort:snort	snort	eq	2.6.1.1
snort:snort	snort	eq	2.7_beta1
sourcefire:intrusion_sensor	sourcefire intrusion sensor	eq	4.1
sourcefire:intrusion_sensor	sourcefire intrusion sensor	eq	4.5
sourcefire:intrusion_sensor	sourcefire intrusion sensor	eq	4.6