CVE-2006-2769: Sourcefire Snort

Medium severity, CVSS 5.0. EPSS: 10.8% chance of exploitation in the next 30 days.

The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return (\r) after the URL and before the HTTP declaration.

Affected products

• Sourcefire Snort: version 2.4 only; version 2.4.1 only; version 2.4.2 only; version 2.4.3 only; version 2.4.4 only

Published 2006-06-02. Last modified 2026-06-16.