[Snort-sigs] invalid references in snort rules

Mark McDonagh markmormartin at ...1934...
Mon Oct 6 10:58:03 EDT 2003

Hello everybody,

I was recently testing the references for the rules and I found that the
following URLs don't seem to be valid:

http://www.tlsecurity.net/backdoor/Dagger.1.4.html (sid 104, 105)
http://www.bugtraq.org/dev/GOBBLES-12.txt (sid 1382) - I found a 
similarily-named document at 

http://labs.defcom.com/adv/2001/def-2001-31.txt (sid 1379)
http://www.w00w00.org/files/w00aimexp/ (sid 1393, 1752) - should be 
http://www.w00w00.org/files/exploits/w00aimexp/ instead
http://www.musiccity.com/technology.htm (sid 1383)

Also, there's a typo in rule 2126 (reference specifies bugtaq instead of

NetFort ISS Limited

More information about the Snort-sigs mailing list