CVE-2016-1417

Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tcapi.dll that is located in the same folder on a remote file share as a pcap file that is being processed.

• CWE-426

• http://hyp3rlinx.altervista.org/advisories/SNORT-DLL-HIJACK.txtExploit, Third Party Advisory
• http://packetstormsecurity.com/files/138915/Snort-2.9.7.0-WIN32-DLL-Hijacking.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/539579/100/0/threaded
• http://www.securityfocus.com/bid/93269Exploit, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1036936Exploit, Third Party Advisory, VDB Entry
• http://hyp3rlinx.altervista.org/advisories/SNORT-DLL-HIJACK.txtExploit, Third Party Advisory
• http://packetstormsecurity.com/files/138915/Snort-2.9.7.0-WIN32-DLL-Hijacking.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/539579/100/0/threaded
• http://www.securityfocus.com/bid/93269Exploit, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1036936Exploit, Third Party Advisory, VDB Entry

Published

Jan 23, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-1409The Neighbor Discovery (ND) protocol implementation in the I…
• CVE-2016-1410Cisco WebEx Meeting Center Original Release Base allows remo…
• CVE-2016-1411A vulnerability in the update functionality of Cisco AsyncOS…
• CVE-2016-1413The web interface in Cisco Firepower Management Center 5.4.0…
• CVE-2016-1415Cisco WebEx Meetings Player T29.10, when WRF file support is…
• CVE-2016-1416Cisco Prime Collaboration Provisioning 10.6 SP2 (aka 10.6.0.…
• CVE-2016-1418Cisco Aironet Access Point Software 8.2(100.0) on 1830e, 183…
• CVE-2016-1419Cisco Access Point devices with software 8.2(102.43) allow r…
• CVE-2016-1420The installation component on Cisco Application Policy Infra…
• CVE-2016-1421A vulnerability in the web application for Cisco IP Phones c…
• CVE-2016-1423A vulnerability in the display of email messages in the Mess…
• CVE-2016-1424Cisco IOS 15.2(1)T1.11 and 15.2(2)TST allows remote attacker…