Sourcefire has learned of a remotely exploitable vulnerability in the Snort DCE/RPC preprocessor. This preprocessor is vulnerable to a stack-based buffer overflow that could potentially allow attackers to execute code with the same privileges as the Snort binary. Sourcefire has prepared updates for Snort open-source software to address this issue. Snort Versions affected include Snort 2.6.1, 2.6.1.1, and 2.6.1.2 and Snort 2.7.0 beta 1.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/54522/snort-preprocessor.txt
Source: https://packetstormsecurity.com/files/54522/snort-preprocessor.txt.html