[Snort-sigs] Wrong group?

JMitzimberg at ...221... JMitzimberg at ...221...
Tue Dec 4 13:47:02 EST 2001


alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS 80 (msg:"WEB-CGI redirect
access";flags: A+; uricontent:"/redirect"; nocase;reference:bugtraq,1179;
reference:cve,CVE-2000-0382; classtype:attempted-recon; sid:895; rev:2;)

Is this in the wrong group?  According to both the bugtraq and CVE, this
signature only affects the Allaire Coldfusion Server.  Shouldn't be put in
web-coldfusion?

Justin Mitzimberg
Information Security Analyst
Bear Creek Corporation
(541) 864-3744
jmitzimberg at ...221...







More information about the Snort-sigs mailing list