[Snort-sigs] WEB-MISC cross site scripting attempt - false positive addition

G. Panula greg.panula at ...2688...
Wed Aug 4 13:36:10 EDT 2004


# This is a template for submitting snort signature descriptions to
# the snort.org website
#
# Ensure that your descriptions are your own
# and not the work of others.  References in the rules themselves
# should be used for linking to other's work.
#
# If you are unsure of some part of a rule, use that as a commentary
# and someone else perhaps will be able to fix it.
#
# $Id$
#
#

Rule:

--
Sid: 1497

--
Summary:  This event is generated when a cross-site scripting attack is 
being attempted, or a potential attacker is testing your site to determine 
if it is vulnerable.

--
False Positives: The default 404 error page given out by IIS 5.0 triggers 
this alert.

--




More information about the Snort-sigs mailing list