[Snort-sigs] SID: 895 False Positives

Aaron Dalton aaron at ...2703...
Wed Aug 4 13:37:28 EDT 2004

Rule:  WEB-CGI redirect access 

Sid: 895

False Positives:
Similar to SID: 882 (WEB-CGI calendar access), this SID produces alerts 
whenever a script named "redirect" is called, regardless of extension.  This 
is not necessarily a problem.  If you have a highly-used script on your site 
named "redirect.*" consider tuning this rule for your site or renaming your 

Aaron Dalton

More information about the Snort-sigs mailing list