IDS 3.1(3)S47 Signature

[jeffrimj]

Hi there,

Seen this artical http://www.eweek.com/article2/0,3959,1197510,00.asp

Will this Signature that we have on the IDS be able to pick up this attack?

We can I read more about what specific signatures will pick up?

Thanks

Mike

[hadbou]

You can read about all the signatures from the Network Security Database(NSDB), it is part of your IDS. To access it use the URL given below,

http://www.cisco.com/en/US/customer/products/sw/secursw/ps5052/products_user_guide_chapter09186a00800d924d.html

[darin.marais]

S48 UPDATE DETAILS

NEW FEATURES

This signature update contains no new features.

NEW SIGNATURES

This signature update contains the following new signatures:

1109 "Cisco IOS Interface DoS"

5383 "Cyberstrong eShop SQL Injection"

6256 "HTTP Authorization Failure"

TUNED SIGNATURES / RESOLVED CAVEATS

None.

CAVEATS

The NSDB states that signature 1109 is supported only in version 4.0.

This is not correct, signature 1109 is also supported in version 3.1.

from the Readme-IDS-sig-3.1-3-S48.txt