[Snort-devel] [ snort-Bugs-767045 ] wrong pattern match in signature ORACLE all_tab_privs access

SourceForge.net noreply at ...12...
Tue Jul 8 13:25:10 EDT 2003


Bugs item #767045, was opened at 2003-07-07 02:58
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=103357&aid=767045&group_id=3357

Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Nobody/Anonymous (nobody)
Summary: wrong pattern match in signature ORACLE all_tab_privs access

Initial Comment:
alert tcp $EXTERNAL_NET any -> $SQL_SERVERS 
$ORACLE_PORTS (msg:"ORACLE all_tab_columns 
access"; flow:to_server,established; 
content:"all_tab_columns"; nocase; classtype:protocol-
command-decode; sid:1684; rev:3;)
alert tcp $EXTERNAL_NET any -> $SQL_SERVERS 
$ORACLE_PORTS (msg:"ORACLE all_tab_privs access"; 
flow:to_server,established; content:"all_tab_columns"; 
nocase; classtype:protocol-command-decode; sid:1685; 
rev:3;)
both the above signature has pattern match 
as "all_tab_columns"
sid:1685 should have pattern match as "all_tab_privs"

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=103357&aid=767045&group_id=3357




More information about the Snort-devel mailing list