[prev in list] [next in list] [prev in thread] [next in thread]
List: bleeding-sigs
Subject: [Bleeding-sigs] Proftpd Sig
From: Matt Jonkman <jonkman () bleedingthreats ! net>
Date: 2006-11-28 22:31:54
Message-ID: 456CB8DA.4010809 () bleedingthreats ! net
[Download RAW message or body]
#by Steve Adair steven@securityzone - 11/28/2006
alert tcp any any -> $HOME_NET 21 (msg:"BLEEDING-EDGE EXPLOIT Potential
ProFTPD .message file overflow attempt"; flow:to_server
,established; content:"STOR"; nocase; content:".message"; distance:0;
reference:url,www.milw0rm.com/exploits/2856; sid:2003196;
rev:1;)
Posted. Please let us know how it goes. Thanks Steve.
Matt
--
--------------------------------------------
Matthew Jonkman
Bleeding Edge Threats
765-429-0398
http://www.bleedingthreats.net
--------------------------------------------
PGP: http://www.bleedingthreats.com/mattjonkman.asc
_______________________________________________
Bleeding-sigs mailing list
Bleeding-sigs@bleedingthreats.net
http://lists.bleedingthreats.net/cgi-bin/mailman/listinfo/bleeding-sigs
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic