CVE-2006-2769

CVE-2006-2769 describes a bypass vulnerability in the HTTP Inspect preprocessor (http_inspect) of Snort versions 2.4.0 through 2.4.4. Remote attackers can evade "uricontent" rules by inserting a carriage return after the URL and before the HTTP declaration, affecting Sourcefire Snort products. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and no authentication required, potentially leading to a partial denial of service (availability impact). While not listed on the KEV catalog, an exploit (EDB-27931) is publicly available on ExploitDB. There is no evidence of active exploitation, and the vulnerability has received minimal community discussion or media coverage.