Endpoint Protection

 View Only
Back to discussions
Expand all | Collapse all

Did Symantec released any Anti-Virus and IPS signature to detect the exploit on IIS FTP NLST Stack Overflow vulnerability?

  • 1.  Did Symantec released any Anti-Virus and IPS signature to detect the exploit on IIS FTP NLST Stack Overflow vulnerability?

    Posted Sep 04, 2009 12:06 AM
    I'm read that public exploit is available for the vulnerability described here: http://www.securityfocus.com/bid/36189

    As of this writing, has Symantec released any Anti-Virus and IPS signature to detect this exploit yet?

    Thanks in Advance.





  • 2.  RE: Did Symantec released any Anti-Virus and IPS signature to detect the exploit on IIS FTP NLST Stack Overflow vulnerability?

    Broadcom Employee
    Posted Sep 04, 2009 01:57 AM
    Andy, not at the moment, but it is a work in progress. Will update on this thread, once the date is firmer.

    Meanwhile you can use custom signature in SEP for detection.

    Cheers!


  • 3.  RE: Did Symantec released any Anti-Virus and IPS signature to detect the exploit on IIS FTP NLST Stack Overflow vulnerability?
    Best Answer

    Posted Sep 17, 2009 03:45 AM
    Symantec has released IPS signatures for MS IIS FTP NLST BO
    in update 117
    for more info :http://www.symantec.com/business/security_response/attacksignatures/detail.jsp?asid=23467