Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 167730 - net-analyzer/snort < 2.6.1.3 DCE/RPC preprocessor Buffer Overflow CVE-2006-5276
Summary: net-analyzer/snort < 2.6.1.3 DCE/RPC preprocessor Buffer Overflow CVE-2006-5276
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High major (vote)
Assignee: Gentoo Security
URL: http://nvd.nist.gov/nvd.cfm?cvename=C...
Whiteboard: B1 [glsa] Executioner
Keywords:
Depends on:
Blocks:
 
Reported: 2007-02-20 09:55 UTC by Executioner
Modified: 2007-03-02 00:36 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Executioner 2007-02-20 09:55:30 UTC
Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic.

Consequences:

Gain Access

Reproducible: Didn't try




http://xforce.iss.net/xforce/xfdb/31275
http://www.snort.org/docs/advisory-2007-02-19.html
http://iss.net/threats/257.html
Comment 1 Markus Ullmann (RETIRED) gentoo-dev 2007-02-20 10:56:59 UTC
ebuild in CVS
Comment 2 Stefan Cornelius (RETIRED) gentoo-dev 2007-02-20 12:57:37 UTC
arches, please test and stable 2.6.1.3, thx
Comment 3 Tobias Scherbaum (RETIRED) gentoo-dev 2007-02-20 19:07:50 UTC
(In reply to comment #1)
> ebuild in CVS
> 

Fails to apply snort-2.6.1.1-gre.patch.
Comment 4 Daniel Black (RETIRED) gentoo-dev 2007-02-21 12:22:11 UTC
> Fails to apply snort-2.6.1.1-gre.patch.
Thanks - patch wasn't needed - removed in latest ebuild
Comment 5 Markus Rothe (RETIRED) gentoo-dev 2007-02-21 20:25:32 UTC
ppc64 stable
Comment 6 Stefan Cornelius (RETIRED) gentoo-dev 2007-02-25 22:17:25 UTC
https://forums.gentoo.org/viewtopic.php?p=3927648#3927648

c'mon
Comment 7 Steve Dibb (RETIRED) gentoo-dev 2007-02-27 02:39:27 UTC
amd64 stable
Comment 8 Jose Luis Rivero (yoswink) (RETIRED) gentoo-dev 2007-02-27 12:12:13 UTC
If I'm not wrong, alpha doesn't have got any stable keyword in snort, so you don't  need the alpha love.
Comment 9 Tobias Scherbaum (RETIRED) gentoo-dev 2007-02-27 19:09:35 UTC
ppc stable
Comment 10 Raphael Marichez (Falco) (RETIRED) gentoo-dev 2007-03-02 00:36:19 UTC
GLSA 200703-01, thanks everybody