CVE-2006-5276

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 79.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-02-20 · updated 2026-06-16

Description

Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic.

Affected products

Snort: through 2.6.1.2; 2.6.1, 2.6.1.1, 2.7_beta1
Sourcefire Intrusion Sensor: 4.1, 4.5, 4.6

References

http://fedoranews.org/updates/FEDORA-2007-206.shtml
http://iss.net/threats/257.html
http://secunia.com/advisories/24190
http://secunia.com/advisories/24235
http://secunia.com/advisories/24239
http://secunia.com/advisories/24240
http://secunia.com/advisories/24272
http://secunia.com/advisories/26746
http://security.gentoo.org/glsa/glsa-200703-01.xml
http://www.kb.cert.org/vuls/id/196240
http://www.osvdb.org/32094
http://www.securityfocus.com/archive/1/461810/100/0/threaded

Get alerted when CVE-2006-5276 or the next vulnerability affects your stack