[Snort-devel] duplicate SID in 2.3.0 final sid-msg.map

Gregory S Thomas greg.thomas at ...15...
Tue Jan 25 15:05:37 EST 2005

The sid-msg.map file distributed with snort-2.3.0 final contains
two instances of SID 3007 adjacent to each other:

3007 || WEB-IIS Hit-Highlighting arbitrary file access attempt || url,www.microsoft.com/technet/security/bulletin/ms00-006.mspx || cve,2000-0097 || bugtraq,950
3007 || IMAP delete overflow attempt || bugtraq,11675

The second instance appears in imap.rules, but the first instance
does not appear in any of the *.rules files.

-- greg

More information about the Snort-devel mailing list