On Fri, 24 Oct 2003, Philipp Buehler wrote:

> If shellcode matches 0x72, 0x6d, 0x2d and 0x66 .. always be "alerted" :>

Also, if the exploit requires root and it's only calling connect()
thats another tip off.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Reply via email to