Re: [Snort-sigs] False Positive on SMTP HELO Overflow

From: Matt Kettler <mkettler(at)evi-inc.com>
Date: Mon Apr 28 2003 - 16:54:16 EDT

At 03:10 PM 4/28/2003 -0500, Ron Shuck wrote:
>I have been getting a lot of false positives on this SID if the connect

Tcp is a stream protocol. The overflow can be delivered one byte at a time and still work.

---

This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven.
http://thinkgeek.com/sf

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Mon Apr 28 17:30:49 2003