?? 2456.txt
字號(hào):
Rule:--Sid:2456--Summary:This event is generated when a host in your network that has Yahoo Instant Messenger running attempts to send a file to another Yahoo IM user. --Impact:Possible policy violation. Instant Messenger programs may not be appropriate in certain network environments.--Detailed Information:It is possible that a file that is exchanged may contain malicious code such as as virus, worm, Trojan, or backdoor. Also, since all exchanges are done via Yahoo IM servers and in clear text, there should be no expectation of privacy. This may also provide a less scrutinized means of sharing unauthorized or inappropriate files with others. --Affected Systems:Any host running Yahoo Instant Messenger.--Attack Scenarios:A Yahoo IM user may unwittingly accept a malicious file.--Ease of Attack:Easy to transfer a malicious file.--False Positives:None Known.--False Negatives:It may be possible for Yahoo IM traffic to use other ports than the default expected ones. --Corrective Action:Disallow the use of IM clients on the protected network and enforce or implement an organization wide policy on the use of IM clients.--Contributors:Sourcefire Research TeamJudy Novak <judy.novak@sourcefire.com>--Additional References:Yahoo Protocolhttp://www.cse.iitb.ac.in/~varunk/YahooProtocol.htm--
?? 快捷鍵說(shuō)明
復(fù)制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號(hào)
Ctrl + =
減小字號(hào)
Ctrl + -