alert tcp $EXTERNAL_NET any -> $HOME_NET 21
(msg:"Serv-U Local Privilege Escalation
Vulnerability"; content:"site exec"; nocase; rawbytes;
reference:url,http.www.securiteam.com/windowsntfocus/5YP0F1FDPO.html;
classtype:misc-activity; sid:2000000; rev:1;)
alert tcp $EXTERNAL_NET any -> $HOME_NET 21
(msg:"Serv-U FTP directory traversal vulnerability";
pcre:"/\\[\.]+%20/Bi";
reference:url,http.www.securiteam.com/windowsntfocus/6C0041F0KO.html;
classtype:misc-activity; sid:2000000; rev:1;)
alert tcp $EXTERNAL_NET any -> $HOME_NET 21
(msg:"Serv-U FTP directory traversal vulnerability";
pcre:"/%20[\.]+\//Bi";
reference:url,http.www.securiteam.com/windowsntfocus/6C0041F0KO.html;
classtype:misc-activity; sid:2000000; rev:1;)
alert tcp $EXTERNAL_NET any -> $HOME_NET 21
(msg:"Serv-U LIST -l Parameter Buffer Overflow";
content:"LIST -l\:"; nocase; isdataat:134,
relative;reference:url,http.www.securiteam.com/windowsntfocus/5ZP0G2KCKA.html;
classtype:misc-activity; sid:2000000; rev:1;)
alert tcp any any -> any any (msg:"Serv-U MDTM Command
Buffer Overflow Vulnerability";
pcre:"/MDTM[\s]+[\d]+[\s\S]*[\w]{45}/Bi";
reference:url,http.www.securiteam.com/windowsntfocus/5HP010ACAS.html;
classtype:misc-activity; sid:2000000; rev:1;)
alert tcp any any -> any any (msg:"Serv-U FTP Server
Long Filename Stack Overflow Vulnerability";
pcre:"/chmod[\s]+([\d]{1,4})*[\s]*[\w\.\/]{250}/Bi";
reference:url,http.www.securiteam.com/windowsntfocus/5OP0N1PBPG.html;
classtype:misc-activity; sid:2000000; rev:1;)
__________________________________
Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!
http://promotions.yahoo.com/new_mail
-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
