[Snort-sigs] NetBios Fragmentation Issues

snort guy snort-guy at ...12...
Sun Feb 19 11:36:01 EST 2006


NetBios Fragmentation
On October 2004, a presentation was held mentioning the fragmentation 
weaknesses of snort. I would like to know the status of these issues.

"SNORT 2.2.0
Fails test for small TCP sends during SPDETECT
Fails test for small SMB writes during LSASS
Fails test for small DCE fragments
Score: 0/3
False positives on any IPC$ access.
More to come!"

On the presentation from the url 
http://www.immunitysec.com/downloads/canvas_reference_implementation.sxi

_________________________________________________________________
Is your PC infected? Get a FREE online computer virus scan from McAfee� 
Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963





More information about the Snort-sigs mailing list