[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-sigs
Subject:    [Snort-sigs] typo on old snort id 2437
From:       rmkml <rmkml () yahoo ! fr>
Date:       2011-09-13 21:24:39
Message-ID: alpine.LFD.2.01.1109132320202.2161 () lenovo ! localdomain
[Download RAW message or body]

Hi,
First, Big Congratulations on SF VRT for reach (more than) 20 000 rules!
Im found a typo on old snort id 2437 updated on last SEU 495:
  s/commnad/command/
Maybe add http_header on first content, and add file_data before second content...
Maybe exploit exist with only file:script: ...
Regards
Rmkml

http://twitter.com/rmkml

------------------------------------------------------------------------------
BlackBerry&reg; DevCon Americas, Oct. 18-20, San Francisco, CA
Learn about the latest advances in developing for the 
BlackBerry&reg; mobile platform with sessions, labs & more.
See new tools and technologies. Register for BlackBerry&reg; DevCon today!
http://p.sf.net/sfu/rim-devcon-copy1 
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!
[prev in list] [next in list] [prev in thread] [next in thread]