[Dshield] Infocon Yellow: Snort Vulnerability

Håkon Alstadheim hakon at alstadheim.priv.no
Wed Oct 19 13:15:53 GMT 2005


Johannes B. Ullrich wrote:
>We turned the infocon to 'yellow' this morning over the snort
>vulnerability. For details, see
>https://isc.sans.org/diary.php?storyid=772
>  
My first instinct upon seeing this was 'rcsnort stop', since I am only 
running small site, and I don't have time to pore over the snort-logs 
today anyway. Then I thought 'maybe that is the plan'. I'd say watch out 
for other attacks that would normally be caught by snort in the 
following couple of days.
-- 
Håkon Alstadheim 	(+47) 74 82 60 27 / 93 63 00 28
7510 Skatval
http://alstadheim.priv.no/hakon/




More information about the list mailing list