[Snort-sigs] NTMLSSP or NTLMSSP sigs ?

rmkml rmkml at ...324...
Wed Jan 9 13:45:52 EST 2008


Hi,
Happy New Year,

NTMLSSP is bad name and NTLMSSP is real name ?

sid 2382: NETBIOS SMB Session Setup NTMLSSP asn1 overflow attempt
sid 2383: NETBIOS SMB-DS Session Setup NTMLSSP asn1 overflow attempt
sid 3000: NETBIOS SMB Session Setup NTMLSSP unicode asn1 overflow attempt
sid 3001: NETBIOS SMB Session Setup NTMLSSP andx asn1 overflow attempt
sid 3002: NETBIOS SMB Session Setup NTMLSSP unicode andx asn1 overflow attempt
sid 3003: NETBIOS SMB-DS Session Setup NTMLSSP unicode asn1 overflow attempt
sid 3004: NETBIOS SMB-DS Session Setup NTMLSSP andx asn1 overflow attempt
sid 3005: NETBIOS SMB-DS Session Setup NTMLSSP unicode andx asn1 overflow attempt

if yes, maybe rename msg on sid 2382-2383, 3000-3005 ?

Best Regards
Rmkml
Crusoe Researches
http://www.Crusoe-Researches.com




More information about the Snort-sigs mailing list