Re: DOS MSDTC attempt false positive

[Matt Kettler <mkettler () evi-inc com>]

Actualy I just checked with bugtraq, this exploit takes at least 1024 bytes 
of data to cause the crash so the "0 bytes" idea bill had is a red herring. 
The rule is valid as it stands with dsize >1023.


http://online.securityfocus.com/bid/4006/discussion/


_______________________________________________________________

Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: bandwidth () sourceforge net
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users