[Snort-sigs] Signature Definition #462, 6 of 20

Esler, Joel Contractor EslerJ at ...785...
Mon Jun 9 05:20:19 EDT 2003


 Rule: -- ICMP Unassigned! (Type 7)  
 Sid: -- 462
 Summary: -- This string detects and ICMP type of "7".
 Impact: -- Unknown
 Detailed Information: -- Certain scanners and hacker tools will allow you
to specifically craft ICMP types of 7, this could be an indication of a
vulnerability on your network, or an attacker crafting very specific packets
to sneak past outer defensive perimeters.
 Affected Systems: -- Unknown
 Attack Scenarios: -- Could be used for reconnasaince, (Scanning tools)
 Ease of Attack: -- Difficult
 False Positives: -- Unknown
 False Negatives: -- Unknown
 Corrective Action: -- Disallow ICMP Ping inbound at the router or firewall,
only allow incoming if requested from inside the network.
 Contributors: -- Joel Esler
 Additional References: 
 
 




More information about the Snort-sigs mailing list