[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-sigs
Subject:    [Snort-sigs] Cisco ILMI community backdoor sig.
From:       Erik Fichtner <emf () servervault ! com>
Date:       2001-02-27 6:35:37
[Download RAW message or body]

alert udp $EXTERNAL_NET any -> $HOME_NET 161 (msg:"Cisco IOS SNMP Backdoor access, ILMI"; content:"ILMI"; nocase;) 


...*sigh*... gotta love Cisco.

-- 
Erik Fichtner
Security Administrator, ServerVault, Inc.
703-333-5900

[prev in list] [next in list] [prev in thread] [next in thread]