alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB WinIPDS? Directory Traversal Vulnerabilities POST"; flow:to_server,established; content:"POST "; depth:5; pcre:"/(\.\.[\\/]){1,}.+\.(com|exe|bat|dll|cab|ini)/"; classtype:web-application-attack; reference:url,aluigi.altervista.org/adv/winipds-adv.txt; reference:bugtraq,27757; reference:url,doc.emergingthreats.net/2007873; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_WinIPDS; sid:2007873; rev:3;)

Added 2009-02-16 21:46:09 UTC

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB WinIPDS? Directory Traversal Vulnerabilities POST"; flow:to_server,established; content:"POST "; depth:5; pcre:"/(\.\.[\\/]){1,}.+\.(com|exe|bat|dll|cab|ini)/"; classtype:web-application-attack; reference:url,aluigi.altervista.org/adv/winipds-adv.txt; reference:bugtraq,27757; reference:url,doc.emergingthreats.net/2007873; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_WinIPDS; sid:2007873; rev:3;)

Added 2009-02-16 21:46:09 UTC

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB WinIPDS? Directory Traversal Vulnerabilities POST"; flow:to_server,established; content:"POST "; depth:5; pcre:"/(\.\.[\\/]){1,}.+\.(com|exe|bat|dll|cab|ini)/"; classtype:web-application-attack; reference:url,aluigi.altervista.org/adv/winipds-adv.txt; reference:bugtraq,27757; reference:url,doc.emergingthreats.net/2007873; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_WinIPDS; sid:2007873; rev:3;)

Added 2009-02-16 21:45:24 UTC

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB WinIPDS? Directory Traversal Vulnerabilities POST"; flow:to_server,established; content:"POST "; depth:5; pcre:"/(\.\.[\\/]){1,}.+\.(com|exe|bat|dll|cab|ini)/"; classtype:web-application-attack; reference:url,aluigi.altervista.org/adv/winipds-adv.txt; reference:bugtraq,27757; reference:url,doc.emergingthreats.net/2007873; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_WinIPDS; sid:2007873; rev:3;)

Added 2009-02-16 21:45:24 UTC

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB WinIPDS? Directory Traversal Vulnerabilities POST"; flow:to_server,established; content:"POST "; depth:5; pcre:"/(\.\.[\\/]){1,}.+\.(com|exe|bat|dll|cab|ini)/"; classtype:web-application-attack; reference:url,aluigi.altervista.org/adv/winipds-adv.txt; reference:bugtraq,27757; sid:2007873; rev:2;)

Added 2008-02-25 09:53:09 UTC