[Snort-sigs] Updated BLASTER TFTP rules

Erick Mechler emechler at ...1653...
Wed Aug 20 00:03:06 EDT 2003


:: Note: the sids are wrong because I just poached them from an e-mail from
:: this list. In fact, now that I look, there are STILL NO OFFICIAL SNORT RULES
:: FOR THIS RPC-BASED attack! I see no rules for "blast" and no rules for "dcom".

Check the archives; they've been mentioned quite often over the past 2 
weeks.

http://www.snort.org/snort-db/sid.html?sid=2192
http://www.snort.org/snort-db/sid.html?sid=2193




More information about the Snort-sigs mailing list