[Snort-sigs] SID: 895 False Positives

Aaron Dalton aaron at ...2703...
Wed Aug 4 13:37:28 EDT 2004


Rule:  WEB-CGI redirect access 

--
Sid: 895

--
False Positives:
Similar to SID: 882 (WEB-CGI calendar access), this SID produces alerts 
whenever a script named "redirect" is called, regardless of extension.  This 
is not necessarily a problem.  If you have a highly-used script on your site 
named "redirect.*" consider tuning this rule for your site or renaming your 
script.

-- 
Aaron Dalton
http://aaron.daltons.ca




More information about the Snort-sigs mailing list