[Snort-sigs] false positive for SID 2123

Joseph Gama josephgama at ...144...
Mon Jul 12 14:35:03 EDT 2004


Hello, 
There is one false positive for SID 2123
ATTACK-RESPONSES Microsoft cmd.exe banner
When browsing here:

http://www.experts-exchange.com/Operating_Systems/WinXP/Q_21016963.html

It's very obvious because the page has all the
keywords that trigger the rule. Anyway, I just wanted
to report it.

Peace,

Joseph Gama


		
__________________________________
Do you Yahoo!?
Yahoo! Mail is new and improved - Check it out!
http://promotions.yahoo.com/new_mail




More information about the Snort-sigs mailing list