CVE-2006-2769

The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return (\r) after the URL and before the HTTP declaration.

• CWE-264

• http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html
• http://marc.info/?l=snort-devel&m=114909074311462&w=2
• http://secunia.com/advisories/20413Vendor Advisory
• http://secunia.com/advisories/20766Vendor Advisory
• http://securityreason.com/securityalert/1018
• http://securitytracker.com/id?1016191Exploit, Patch
• http://www.demarc.com/support/downloads/patch_20060531Exploit, Patch
• http://www.osvdb.org/25837Exploit, Patch
• http://www.securityfocus.com/archive/1/435600/100/0/threaded
• http://www.securityfocus.com/archive/1/435734/100/0/threaded
• http://www.securityfocus.com/archive/1/435797/100/0/threaded
• http://www.securityfocus.com/archive/1/435872/100/0/threaded
• http://www.securityfocus.com/bid/18200Exploit, Patch
• http://www.snort.org/pub-bin/snortnews.cgi#431
• http://www.vupen.com/english/advisories/2006/2119Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26855
• http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html
• http://marc.info/?l=snort-devel&m=114909074311462&w=2
• http://secunia.com/advisories/20413Vendor Advisory
• http://secunia.com/advisories/20766Vendor Advisory
• http://securityreason.com/securityalert/1018
• http://securitytracker.com/id?1016191Exploit, Patch
• http://www.demarc.com/support/downloads/patch_20060531Exploit, Patch
• http://www.osvdb.org/25837Exploit, Patch
• http://www.securityfocus.com/archive/1/435600/100/0/threaded
• http://www.securityfocus.com/archive/1/435734/100/0/threaded
• http://www.securityfocus.com/archive/1/435797/100/0/threaded
• http://www.securityfocus.com/archive/1/435872/100/0/threaded
• http://www.securityfocus.com/bid/18200Exploit, Patch
• http://www.snort.org/pub-bin/snortnews.cgi#431
• http://www.vupen.com/english/advisories/2006/2119Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26855

Published

Jun 2, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2763SQL injection vulnerability in Pre News Manager 1.0 allows r…
• CVE-2006-2764Cross-site scripting (XSS) vulnerability in GuestbookXL 1.3 …
• CVE-2006-2765Cross-site scripting (XSS) vulnerability in news_information…
• CVE-2006-2766Buffer overflow in INETCOMM.DLL, as used in Microsoft Intern…
• CVE-2006-2767PHP remote file inclusion vulnerability in Ottoman 1.1.2, wh…
• CVE-2006-2768PHP remote file inclusion vulnerability in METAjour 2.1, whe…
• CVE-2006-2770Directory traversal vulnerability in randompic.php in pppBLO…
• CVE-2006-2771admin/radera/tabort.asp in Hogstorps hogstorp guestbook 2.0 …
• CVE-2006-2772Cross-site scripting (XSS) vulnerability in add.asp in Hogst…
• CVE-2006-2773admin/redigera/redigera2.asp in Hogstorps hogstorp Guestbook…
• CVE-2006-2774Cross-site scripting (XSS) vulnerability in search.php in Qo…
• CVE-2006-2775Mozilla Firefox and Thunderbird before 1.5.0.4 associates XU…