10
CVSSv2

CVE-2006-5276

Published: 20/02/2007 Updated: 17/10/2018
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Stack-based buffer overflow in the DCE/RPC preprocessor in Snort prior to 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote malicious users to execute arbitrary code via crafted SMB traffic.

Vulnerable Product Search on Vulmon Subscribe to Product

snort snort 2.6.1

snort snort 2.6.1.1

sourcefire intrusion sensor 4.6

snort snort

sourcefire intrusion sensor 4.5

snort snort 2.7_beta1

sourcefire intrusion sensor 4.1

Exploits

#!/usr/bin/python # # Remote exploit for Snort DCE/RPC preprocessor vulnerability as described in # CVE-2006-5276 The exploit binds a shell to TCP port 4444 and connects to it # This code was tested against snort-261 running on Red Hat Linux 8 # # Author shall bear no responsibility for any screw ups caused by using this code # Winny Thomas :-) ...
#!/usr/bin/python # # Snort DCE/RPC Preprocessor Buffer Overflow (DoS) # # Author: Trirat Puttaraksa <trir00t [at] gmailcom> # # sf-freedomblogspotcom # ###################################################### # For educational purpose only # # This exploit just crash Snort 261 on Fedora Core 4 However, Code Execution # may be pos ...
#!/usr/bin/python # # Snort DCE/RPC Preprocessor Buffer Overflow (Command Execution Version) # # Author: Trirat Puttaraksa <trir00t [at] gmailcom> # # sf-freedomblogspotcom # ###################################################### # For educational purpose only # # This exploit call calcexe on Windows XP SP2 + Snort 261 # # Note: ...
## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # web site for more information on licensing and terms of use # metasploitcom/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = GoodRanking include Msf::Exploit::Cap ...