CVE-2006-5276: Snort

High severity, CVSS 10.0. EPSS: 79.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic.

Affected products

• Snort Snort: up to and including 2.6.1.2; version 2.6.1 only; version 2.6.1.1 only; version 2.7_beta1 only
• Sourcefire Intrusion Sensor: version 4.1 only; version 4.5 only; version 4.6 only

Published 2007-02-20. Last modified 2026-06-16.