Snort mailing list archives
Re: Directory Traversal
From: Jim Kipp <jkipp5 () home com>
Date: Sun, 30 Sep 2001 11:35:20 -0400
E
Have a look at the alert. Notice the 'Web-MISC'? That rule is in web-misc.rules not in web-iis.rules.
Yes, I kow where the rule is, but I still don't know what it is exactly for. It does look IIS related, because in the payload there are GET ../cmd.exe blah blah _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- (no subject), (continued)
- (no subject) Peter Fuggle (Sep 19)
- (no subject) Thomas Nilsen (Sep 20)
- Re: (no subject) richard (Sep 20)
- RE: (no subject) Steve Halligan (Sep 20)
- RE: (no subject) Jeff Anderson (Sep 20)
- RE: (no subject) Thomas Nilsen (Sep 20)
- (no subject) Kenny (Sep 27)
- (no subject) Lists (Sep 29)
- Directory Traversal Jim Kipp (Sep 30)
- Re: Directory Traversal Erek Adams (Sep 30)
- Re: Directory Traversal Jim Kipp (Sep 30)
- Directory Traversal Jim Kipp (Sep 30)