[Snort-users] a new worm 4 linux - Adore

Dr SuSE drsuse at ...748...
Thu Apr 5 09:18:42 EDT 2001


According to SANS GIAC this worm uses the same exploits as the Ramen and Lion 
worms.  The GIAC info can be found at http://www.sans.org/y2k/adore.htm and it 
states that Snort already detects most of the worms signatures which makes 
sense considering the exploits are nothing new.


> have someone a rule for this ?
> 
> 
> MfG
> 
> Andreas 
> 





---------------------------------------------
Microsoft ist nicht installiert.
http://www.drsuse.org/






More information about the Snort-users mailing list