[Snort-users] FP's with sid:17239 - IMAP Alt-N MDaemon IMAP server CREATE command buffer overflow attempt

Joel Esler jesler at ...1935...
Tue Oct 12 15:41:42 EDT 2010

This rule was updated in today's rulepack.


On Oct 12, 2010, at 1:20 PM, Eoin Miller wrote:

> I really can't believe this signature, it seems like it would trigger 
> WAY to often. Anyone else getting a lot of hits with this?

Joel Esler

More information about the Snort-users mailing list