[Snort-sigs] Cisco ILMI community backdoor sig.

Erik Fichtner emf at ...4...
Tue Feb 27 01:35:37 EST 2001


alert udp $EXTERNAL_NET any -> $HOME_NET 161 (msg:"Cisco IOS SNMP Backdoor access, ILMI"; content:"ILMI"; nocase;) 


...*sigh*... gotta love Cisco.

-- 
Erik Fichtner
Security Administrator, ServerVault, Inc.
703-333-5900




More information about the Snort-sigs mailing list