$ cve CVE-2006-5276 JSON

CVE-2006-5276 EXPLOIT

10.0

HIGH · CVSS 2.0 · EPSS 79.4% (pctl 100)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic.

Scoring

CVSS	10.0 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS	79.44% — more likely to be exploited than 100% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2007-02-20
Last modified	2026-06-16

Affected (2)

Vendor	Product
snort	snort
sourcefire	intrusion sensor

Public exploits

Source	Title	Date
exploit-db	Snort 2 - DCE/RPC Preprocessor Buffer Overflow (Metasploit)	2012-04-09
exploit-db	Snort 2.6.1 (Linux) - DCE/RPC Preprocessor Remote Buffer Overflow	2007-03-30
exploit-db	Snort 2.6.1 - DCE/RPC Preprocessor Remote Buffer Overflow	2007-03-01
exploit-db	Snort 2.6.1 - DCE/RPC Preprocessor Remote Buffer Overflow (Denial of Service) (PoC)	2007-02-23

References

→ the Explorer · watch your stack · NVD