[Dshield] Microsoft ASN.1

John Hardin johnh at aproposretail.com
Wed Feb 11 21:49:57 GMT 2004


On Wed, 2004-02-11 at 13:32, Dragos Ruiu wrote:

> David Meltzer had this fine snort signature for it:
> 
> alert tcp any any -> any any (msg:"Possible ASN.1 Exploit Attempt")

ROFL!

--
John Hardin  KA7OHZ                           
Internal Systems Administrator/Guru               voice: (425) 672-1304
Apropos Retail Management Systems, Inc.             fax: (425) 672-0192
-----------------------------------------------------------------------
  Failure to plan ahead on someone else's part does not constitute an
  emergency on my part.
                                  - David W. Barts in a.s.r
-----------------------------------------------------------------------
 19 days until ICQ Corp goes away - have you installed Jabber yet?




More information about the list mailing list