hello, as you know two exploits were released for the CVS vulnerability discovered by S.Esser http://www.k-otik.com/exploits/05212004.CVS_Solaris.c.php http://www.k-otik.com/exploits/05212004.CVS_Linux.c.php the ISC Handlers George Bakos and Mike Poor put together some simple and very good snort rules to detect these cvs exploits ...take a look at ISC. http://isc.sans.org/diary.php?date=2004-05-21 Best Regards. Fabienni Gilles - Security Consultant K-OTik Security Survey 24/7 http://www.k-otik.com