Re: [Snort-sigs] Barnyard Choking.

--On 22 September 2004 02:23 -0400 James Ashton <james@vortechhosting.com> 
wrote:

> This might be more of a misc@ issue but it involves sig naming so Ill
> put it here and see what everyone thinks..
>
> I am running barnyard 1.0. A few of the policy sigs have been crashing
> barnyard due to bad SQL sytax based on the Sig Name.
> SID 545, 546, 547, 548 and 554. This seams to be due to the single
> quotes used in the names of these sigs.
>
> Has anyone else seen this issue??

Sounds as though barnyard needs to escape the metacharacters used by DBMS 
when it tries to insert msgs. Take a look at the mysql_real_escape_string() 
distributed with MySQL.

Best Regards,
Alex.
--
Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing             GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9




-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs