Re: WEB-IIS Cmd attack

[Togan Muftuoglu <toganm () users sourceforge net>]

I am on the list please do not CC me

* cdowns; <cdowns () skillsoft com> on 18 Sep, 2001 wrote:
> What is the actual signiture as i have seen nothing yet on my servers in
> NH

Snort is catching it as WEB-IIS cmd.exe access from the snort.org rules
nothing special


-- 
Togan Muftuoglu


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users