Symantec™ Security Gateways Reference Guide - Sawmill

IDS eventsIntrusion attempts327Netscape Directory Index BugBase Event:Details:Response:Affected:HTTP_URL_WPARGAn attempt was made to exploit the “?wp-c*” Netscape Directory Server info leak bug.Location and audit of client and server is recommended. If you intend to use these CGIs you shouldcontact the vendor for any applicable updates.No specific targets.False Positives: None known.References:CVE-2000-0236HTTP SpecificationsNetscape OverflowBase Event:Details:Response:Affected:HTTP_BODY_SIG2Shell code for well known Netscape client overflow was detected inside the body of an HTTPrequest. This indicates a possible attempted buffer overflow attack.Location and audit of client and server is recommended. You should also contact the client vendorfor any applicable updates.No specific targets.False Positives: None known.References:HTTP Specifications