Snort mailing list archives
More false positives on rules?
From: "Andy Berryman" <aberryman () Cymtec com>
Date: Thu, 16 Sep 2010 09:58:27 -0500
Anyone else seeing this? It looks like it's triggering when people are opening images on their cell phones. So far I've seen IOS, RIM, and LG phones. EXPLOIT Microsoft Kodak Imaging small offset malformed tiff 12633 EXPLOIT Microsoft Kodak Imaging small offset malformed tiff2 12634 Thanks, Andy Berryman ############################################################################### This message from Cymtec Systems, Inc. contains confidential information and is solely for the use of the recipient(s) named above. If you are not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this message in error and that any review, disclosure, copying, distribution or use of the contents of this message is strictly prohibited. If you have received this message in error, please destroy it immediately and notify Cymtec Systems, Inc. by telephone at +1.314.993.8700 or by return e-mail. ###############################################################################
------------------------------------------------------------------------------ Start uncovering the many advantages of virtual appliances and start using them to simplify application deployment and accelerate your shift to cloud computing. http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- More false positives on rules? Andy Berryman (Sep 16)
- Re: More false positives on rules? waldo kitty (Sep 16)
- <Possible follow-ups>
- Re: More false positives on rules? Andy Berryman (Sep 16)
- Re: More false positives on rules? Joel Esler (Sep 16)