Snort mailing list archives

typo on old snort id 2437

From: rmkml <rmkml () yahoo fr>
Date: Tue, 13 Sep 2011 23:24:39 +0200 (CEST)

Hi,
First, Big Congratulations on SF VRT for reach (more than) 20 000 rules!
Im found a typo on old snort id 2437 updated on last SEU 495:
  s/commnad/command/
Maybe add http_header on first content, and add file_data before second content...
Maybe exploit exist with only file:script: ...
Regards
Rmkml

http://twitter.com/rmkml

------------------------------------------------------------------------------
BlackBerry&reg; DevCon Americas, Oct. 18-20, San Francisco, CA
Learn about the latest advances in developing for the 
BlackBerry&reg; mobile platform with sessions, labs & more.
See new tools and technologies. Register for BlackBerry&reg; DevCon today!
http://p.sf.net/sfu/rim-devcon-copy1 
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!

Current thread:

typo on old snort id 2437 rmkml (Sep 13)