[Snort-users] Rule 17494

Jeff Kell jeff-kell at ...6282...
Fri Oct 1 15:25:58 EDT 2010


 On 10/1/2010 3:08 PM, Jefferson, Shawn wrote:
> Anyone else notice this rule, 17494 triggering a lot today?  Or is it just me... it's
> an old vulnerability from 2006.

If I had to guess, I'd say somebody was covering a bald spot that was pointed out by
someone's IDS test suite  :-)

As to the practical value of it today, that's much akin to Slammer detection.

Jeff
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20101001/24794c59/attachment.html>


More information about the Snort-users mailing list