alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB WinIPDS? Directory Traversal Vulnerabilities GET"; flow:to_server,established; content:"GET "; depth:4; pcre:"/(\.\.[\\/]){1,}.+\.(com|exe|bat|dll|cab|ini)/"; classtype:web-application-attack; reference:url,aluigi.altervista.org/adv/winipds-adv.txt; reference:bugtraq,27757; reference:url,doc.emergingthreats.net/2007872; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_WinIPDS; sid:2007872; rev:2;)

Added 2009-02-16 21:46:09 UTC

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB WinIPDS? Directory Traversal Vulnerabilities GET"; flow:to_server,established; content:"GET "; depth:4; pcre:"/(\.\.[\\/]){1,}.+\.(com|exe|bat|dll|cab|ini)/"; classtype:web-application-attack; reference:url,aluigi.altervista.org/adv/winipds-adv.txt; reference:bugtraq,27757; reference:url,doc.emergingthreats.net/2007872; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_WinIPDS; sid:2007872; rev:2;)

Added 2009-02-16 21:46:09 UTC

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB WinIPDS? Directory Traversal Vulnerabilities GET"; flow:to_server,established; content:"GET "; depth:4; pcre:"/(\.\.[\\/]){1,}.+\.(com|exe|bat|dll|cab|ini)/"; classtype:web-application-attack; reference:url,aluigi.altervista.org/adv/winipds-adv.txt; reference:bugtraq,27757; reference:url,doc.emergingthreats.net/2007872; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_WinIPDS; sid:2007872; rev:2;)

Added 2009-02-16 21:45:24 UTC

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB WinIPDS? Directory Traversal Vulnerabilities GET"; flow:to_server,established; content:"GET "; depth:4; pcre:"/(\.\.[\\/]){1,}.+\.(com|exe|bat|dll|cab|ini)/"; classtype:web-application-attack; reference:url,aluigi.altervista.org/adv/winipds-adv.txt; reference:bugtraq,27757; reference:url,doc.emergingthreats.net/2007872; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_WinIPDS; sid:2007872; rev:2;)

Added 2009-02-16 21:45:24 UTC

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB WinIPDS? Directory Traversal Vulnerabilities GET"; flow:to_server,established; content:"GET "; depth:4; pcre:"/(\.\.[\\/]){1,}.+\.(com|exe|bat|dll|cab|ini)/"; classtype:web-application-attack; reference:url,aluigi.altervista.org/adv/winipds-adv.txt; reference:bugtraq,27757; sid:2007872; rev:1;)

Added 2008-02-22 10:03:25 UTC