[Snort-sigs] 2 WEB-IIS unicode directory rules

Brian bmc at ...95...
Thu Aug 12 12:56:07 EDT 2004


On Fri, Aug 06, 2004 at 03:43:08PM +0100, Mark wrote:
> I saw in the WEB-ISS  that there are two WEB-IIS unicode directory
> traversal attempt rules, I understand that they are looking for
> different content, but wouldn't it be nice if they had a different
> message 

Update your ruleset.  These have been deleted because HttpInspect
does a MUCH better job looking for unicode directory traversals.

-brian




More information about the Snort-sigs mailing list