Re: Proposed Signature - COMMUNITY WEB-PHP Remote Execution Backdoor Attempt Against Horde

[Alex Kirk <akirk () sourcefire com>]

For reference, this is in our internal CVS repository as SID 21375, for
release in the next SEU.

On Fri, Feb 17, 2012 at 6:54 PM, lists () packetmail net
<lists () packetmail net>wrote:

> On 02/17/12 16:55, Alex Kirk wrote:
> > Nope, that's fresh detection. We'll get that lined up for the next SEU.
> > Thanks for the contribution - they're always welcome!
>
> Thanks Alex, more specifically this affects Horde 3.3.12 and Horde
> Groupware
> 1.2.10, I apologize for not including this in the message.  I look forward
> to
> future useful community contributions.
>
> Thanks,
> Nathan


-- 
Alex Kirk
AEGIS Program Lead
Sourcefire Vulnerability Research Team
+1-410-423-1937
alex.kirk () sourcefire com

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!