[Snort-sigs] sid 1847 != cve-1999-0643 ? (snort233b14)

rmkml rmkml at ...324...
Mon Jun 13 12:22:08 EDT 2005


Hi,

sid 1847 is :
web-misc.rules:alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS 
(msg:"WEB-MISC webalizer access"; flow:established,to_server; 
uricontent:"/webalizer/"; nocase; reference:bugtraq,3473; 
reference:cve,1999-0643; reference:cve,2001-0835; reference:nessus,10816; 
classtype:web-application-activity; sid:1847; rev:8;)

cve-1999-0643 is :
Candidate: CAN-1999-0643
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-1999-0643
Phase: Proposed (19990804)
Category: SA,DESIGN-NO-ENCRYPTION
The IMAP service is running.

remove cve-1999-0643 on sid 1847 ?

regards
Rmkml




More information about the Snort-sigs mailing list