SnortSnarf signature page

WEB-CGI formmail access

2 alerts with this signature using input module SnortFileInput, with sources:

/home/rivettmj/snort_alertlog/alert

Earliest such alert at 12:42:36.968162 on 05/24/2003
Latest such alert at 12:42:36.968479 on 05/24/2003

WEB-CGI formmail access	1 sources	1 destinations
Priority: 2	Classification: access to a potentially vulnerable web application
[sid:884] [arachNIDS:226][Xref => http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0172][Xref => http://www.securityfocus.com/bid/1187][Xref => http://cgi.nessus.org/plugins/dump.php3?id=10076][Xref => http://cgi.nessus.org/plugins/dump.php3?id=10782]

Source	# Alerts (sig)	# Alerts (total)	# Dsts (sig)	# Dsts (total)
200.61.163.73	2	2	1	1

Destinations	# Alerts (sig)	# Alerts (total)	# Srcs (sig)	# Srcs (total)
192.168.1.6	2	7770	1	624

SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:03:50 2003