Full Disclosure mailing list archives

DCOM RPC exploit IDS rule?

From: Joshua Thomas <JThomas () poweronemedia com>
Date: Wed, 30 Jul 2003 16:47:50 -0400

Two questions:

1) Are there IDS rules out for the DCOM RPC exploit yet? 

2) If so, how much activity in "the wild" has anyone seen on their IDS of
choice for this exploit?

Cheers,

Joshua Thomas
Network Operations Engineer
PowerOne Media, Inc.
tel: 518-687-6143
jthomas () poweronemedia com

Current thread:

DCOM RPC exploit IDS rule? Joshua Thomas (Jul 30)
- Re: DCOM RPC exploit IDS rule? Jordan Wiens (Jul 31)
- <Possible follow-ups>
- RE: DCOM RPC exploit IDS rule? Schmehl, Paul L (Jul 30)
- RE: DCOM RPC exploit IDS rule? Dave Killion (Jul 30)