From: Martin Donlon (akawaka at domain csn.ul.ie)
Date: Fri 04 May 2001 - 12:29:11 IST
On Fri, May 04, 2001 at 11:58:12AM +0100, Kenn Humborg wrote:
> 1. Say "This is IIS 4 - let's only try IIS exploits", "this is
> Apache 1.2.9 - let's only try Apache exploits", "don't know
> what this is - let's not try any exploits"
> 2. Try _every_ exploit regardless of what you think the server is?
I'll take door number 2 please, Kenn.
Our webserver is happy to tell the world its apache whatever, however
snort still picks up 20 or so IIS exploits a day.
-- Martin -- Bother! said Pooh, as he shot the Emperical drone.
This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:10:11 GMT