Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Christian Swartzbaugh

#49374of 53,632
5Total CVSS
Vulnerabilities · 1
PT-2006-3688
5.0
2006-06-02
Cisco · Snort · CVE-2006-2769
**Name of the Vulnerable Software and Affected Versions** Snort versions 2.4.0 through 2.4.4 **Description** The issue allows remote attackers to bypass "uricontent" rules in the HTTP Inspect preprocessor. This can be achieved by inserting a carriage return (`r`) after the URL and before the HTTP declaration. **Recommendations** For Snort versions 2.4.0 through 2.4.4, consider updating to a version that includes a fix for this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.