cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
240
Views
0
Helpful
1
Replies

WebDAV signature false postiives - help

zachf
Level 1
Level 1

Hi,

I seem to have a hug amount of alerts being generated by the webDAV buffer overflow signture.

I am seeing it from people internally browsing certain websites.

It is supposed to trigger if there are over 65000 characters in the URL, but that does not seem to hold true.

Just wondering if anyone else is seeing this at all?

Mine is turned off for the moment as I am positive I don't have any hosts that have not been patched for the webdav exploit.

thanks in advance

z

1 Reply 1

noc
Level 1
Level 1

I am seeing the same thing. I disabled the signature also.

-RM