Sourcefire posted a new advisory on a vulnerability in the DCE/RPC preprocessor introduced in Snort 2.6.1.1. The vulnerability exists in two Snort CVS directories: dcerpc.c and smb_andx_decode.c were modified three days ago to patch the vulnerability. This level of transparency is one of my favorite aspects of open source projects. In 2005 in response to the Snort Back Orifice vulnerability I wondered if we might see a Snort worm.”]
Source: https://taosecurity.blogspot.com/2007/02/snort-dcerpc-vulnerability-thoughts.html