Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

MS04-007

Using the two variations of the ms04-007 poc code I've found, I created a custom signature to detect the ASN overflow.

string.tcp engine

ports: 135-139,445

regex: \xA1\x05\x23\x03\x03\x01\x07

Works with both variations so far

2 REPLIES
Bronze

Re: MS04-007

We are in the process of creating an emergency signature update to address this problem. It will hopefully be out sometime this evening. I will post here when the update is ready.

Bronze

Re: MS04-007

Signature S70 is being uploaded to CCO. It should be available shortly.

222
Views
0
Helpful
2
Replies
CreatePlease login to create content