167730 2007-02-20 09:55 0000 net-analyzer/snort < 2.6.1.3 DCE/RPC preprocessor Buffer Overflow CVE-2006-5276 2007-03-02 00:36:19 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified All Linux RESOLVED FIXED http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-5276 B1 [glsa] Executioner P2 major --- 1 keith@email.arizona.edu security@gentoo.org netmon@gentoo.org keith@email.arizona.edu 2007-02-20 09:55:30 0000 Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic. Consequences: Gain Access Reproducible: Didn't try http://xforce.iss.net/xforce/xfdb/31275 http://www.snort.org/docs/advisory-2007-02-19.html http://iss.net/threats/257.html jokey@gentoo.org 2007-02-20 10:56:59 0000 ebuild in CVS dercorny@gentoo.org 2007-02-20 12:57:37 0000 arches, please test and stable 2.6.1.3, thx dertobi123@gentoo.org 2007-02-20 19:07:50 0000 (In reply to comment #1) > ebuild in CVS > Fails to apply snort-2.6.1.1-gre.patch. dragonheart@gentoo.org 2007-02-21 12:22:11 0000 > Fails to apply snort-2.6.1.1-gre.patch. Thanks - patch wasn't needed - removed in latest ebuild corsair@gentoo.org 2007-02-21 20:25:32 0000 ppc64 stable dercorny@gentoo.org 2007-02-25 22:17:25 0000 https://forums.gentoo.org/viewtopic.php?p=3927648#3927648 c'mon beandog@gentoo.org 2007-02-27 02:39:27 0000 amd64 stable yoswink@gentoo.org 2007-02-27 12:12:13 0000 If I'm not wrong, alpha doesn't have got any stable keyword in snort, so you don't need the alpha love. dertobi123@gentoo.org 2007-02-27 19:09:35 0000 ppc stable falco@gentoo.org 2007-03-02 00:36:19 0000 GLSA 200703-01, thanks everybody