Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Did Symantec released any Anti-Virus and IPS signature to detect the exploit on IIS FTP NLST Stack Overflow vulnerability?

Updated: 21 May 2010 | 2 comments
Andy Chow's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

I'm read that public exploit is available for the vulnerability described here: http://www.securityfocus.com/bid/36189

As of this writing, has Symantec released any Anti-Virus and IPS signature to detect this exploit yet?

Thanks in Advance.

Comments

AL76's picture
03
Sep
2009
0 Votes 0
Login to vote

Update would be coming

Andy, not at the moment, but it is a work in progress. Will update on this thread, once the date is firmer.

Meanwhile you can use custom signature in SEP for detection.

Cheers!

Alan Lee

Principal Regional Product Manager, Enterprise Security Group, Symantec

Vikram Kumar-SAV to SEP's picture
16
Sep
2009
0 Votes 0
Login to vote

Symantec has released IPS

Symantec has released IPS signatures for MS IIS FTP NLST BO
in update 117
for more info :http://www.symantec.com/business/security_response/attacksignatures/detail.jsp?asid=23467