[Snort-sigs] Missing classtypes (only 1 this time)

Kreimendahl, Chad J Chad.Kreimendahl at ...361...
Thu Aug 1 07:54:17 EDT 2002


Feel free to cut/paste.

alert tcp $EXTERNAL_NET 22 -> $HOME_NET any (msg:"EXPERIMENTAL SSH
server banner overflow"; flow:established,from_server; content:"S
SH-"; offset:0; depth:4; content:"|0a|"; distance:600;
classtype:misc-attack reference:bugtraq,5287; sid:1838; rev:2;)




More information about the Snort-sigs mailing list