Activity triggering a generic buffer overflow attack signature

Hello,

 

 

we have development occurring on a web application that is protected by an ASM policy we are seeing two of the generic buffer overflow attack signatures being triggered during testing so I have two questions:

 

 

Is there any way to see what an attack signature is matching against to see why it is being triggered?

 

 

Are buffer overflows triggered by some other setting (max length of string set somewhere for example)?

 

 

Any other clues about how I can troubleshoot this would be appreciated.

 

 

Ian