[Snort-sigs] CVE-2016-0728

Joel Esler (jesler) jesler at ...3865...
Thu Jan 21 07:07:24 EST 2016


I didn't follow up yesterday afternoon, but I looks like we will release some detection.

Sent from my iPhone

On Jan 21, 2016, at 2:20 AM, Elliot Anderson <new.http.451 at ...2420...<mailto:new.http.451 at ...2420...>> wrote:

Hey so seems I wasn't:) you will release 37435-37438 to cover this, right?

Thanks,
Elliot

On 20 Jan 2016, at 19:00, Joel Esler (jesler) <jesler at ...3865...<mailto:jesler at ...3865...>> wrote:

We still need to investigate, but you are probably right. :)


--
Joel Esler
Manager, Threat Intelligence Team & Open Source
Talos Group
http://www.talosintel.com<http://www.talosintel.com/>

On Jan 20, 2016, at 11:54 AM, Elliot Anderson <new.http.451 at ...2420...<mailto:new.http.451 at ...2420...>> wrote:

Just reliazed that this requires local access for exploitation, so probably thats something not covered by network sigs.

Elliot.


On 20 Jan 2016, at 18:52, Joel Esler (jesler) <jesler at ...3865...<mailto:jesler at ...3865...>> wrote:

Elliot,

Let me take a look..


--
Joel Esler
Manager, Threat Intelligence Team & Open Source
Talos Group
http://www.talosintel.com<http://www.talosintel.com/>

On Jan 20, 2016, at 2:16 AM, Elliot Anderson <new.http.451 at ...2420...<mailto:new.http.451 at ...2420...>> wrote:

Any updates if there will be some coverage released soon by TALOS covering this?

Thanks,
Kestutis
------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
_______________________________________________
Snort-sigs mailing list
Snort-sigs at lists.sourceforge.net<mailto:Snort-sigs at lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org<http://www.snort.org/>


Please visit http://blog.snort.org<http://blog.snort.org/> for the latest news about Snort!




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20160121/6a705844/attachment.html>


More information about the Snort-sigs mailing list