[Dshield] Microsoft ASN.1

Brian Dessent brian at dessent.net
Thu Feb 12 00:56:19 GMT 2004


Dragos Ruiu wrote:

> David Meltzer had this fine snort signature for it:
> 
> alert tcp any any -> any any (msg:"Possible ASN.1 Exploit Attempt")

Better hope that you have plenty of free space on the mount that
contains your log files, if you use this one...

Brian




More information about the list mailing list