[Snort-sigs] Broken 1653.7 (WEB-CGI campus access )

nnposter nnposter at ...592...
Fri Feb 25 12:20:43 EST 2005


Rule:  WEB-CGI campus access 

--
Sid: 1653

--
Current version of the rule is looking for "campus" 
while the correct name seems to be "campas".


alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS 
(msg:"WEB-CGI campas access"; flow:to_server,established; 
uricontent:"/campas"; nocase; reference:bugtraq,1975; 
reference:cve,1999-0146; reference:nessus,10035; 
classtype:web-application-activity; sid:1653; rev:8;)




More information about the Snort-sigs mailing list