IDS Signatures Grouped by Software Release Version 2

Release adaptation S27

1108-IP Packet with Proto 11

5279-JJ CGi Cmd Exec

5280-IIS idq.dll Agenda Bridge

5281-Carello add.exe Admission

5283-info2www CGI Agenda Bridge

5284- IIS webhits.dll Agenda Bridge

5285-PHPEventCalendar Cmd Exec

5286-WebScripts WebBBS Cmd Exec

Release adaptation S26

3707-Perl fingerd Command Exec

3714-Oracle TNS 'Service_Name' Overflow

5243-CS .cgi Script Cmd Exec

5275-Phorum Remote Cmd Exec

5276-cart.cgi Command Execution

5276:1-cart.cgi vars,env,db Recon

5276:2-cart.cgi Backdoor

5277- dfire.cgi Command Exec

5278-VP-ASP shoptest.asp admission

9015-Back Door Probe (TCP 23432)

9016-Back Door Probe (TCP 5400)

9017-Back Door Probe (TCP 5401)

9018-Back Door Probe (TCP 2115)

9019-Back Door (UDP 2140)

9020-Back Door (UDP 47262)

Release adaptation S25

3705-Tivoli Storage Manager Client Acceptor Overflow

3706-MIT PGP Public Key Server Overflow

5251-Allaire JRun // Agenda Acknowledgment

5262-Large cardinal of Slashes URL

5263-ecware.exe Admission

5265-RedHat cachemgr.cgi Admission

5266-iCat Carbo Server File Acknowledgment

5268-Cisco Catalyst Remote Command Execution

5269-ColdFusion CFDOCS Agenda Admission

5270-EZ-Mall order.log File Admission

5271-search.cgi Agenda Bridge

5272-count.cgi GIF File Acknowledgment

5273-Bannermatic Sensitive File Admission

5274-Netpad.cgi Agenda Traversal/Cmd Exec

Release adaptation S24

3702-Default sa annual admission

5249-IDS Evasive Encoding

5250-IDS Evasive Double Encoding

5252-Allaire JRun Session ID Recon

5253-Axis StorPoint CD Authentication Bypass

5254-Sambar Server CGI Dos Batch File

5255-Linux Agenda traceroute / nslookup Command Exec

5256-Dot Dot Slash in URI

5257-PHPNetToolpack traceroute Command Exec

5258-Script antecedent acknowledgment with CodeBrws.asp

5259-Snitz Forums SQL bang

5260-Xpede sprc.asp SQL Bang

5261-BackOffice Server Web Administration Admission

Release adaptation S23

6199-cachefsd Overflow

Release adaptation S22

6198-rwalld Cord Architecture

9007-Back Door Probe (TCP 1234)

9008-Back Door Probe (TCP 1999)

9009-Back Door Probe (TCP 6711)

9010-Back Door Probe (TCP 6712)

9011-Back Door Probe (TCP 6713)

9012-Back Door Probe (TCP 6776)

9013-Back Door Probe (TCP 16959)

9014-Back Door Probe (TCP 27573)

Release adaptation S21

3704-IIS FTP STAT Denial of Service

5244- PhpSmsSend Command Exec

5245- HTTP 1.1 Chunked Encoding Transfer

5246-IIS ISAPI Filter Buffer Overflow

5247-IIS ASP SSI Buffer Overflow

5248-IIS HTR ISAPI Buffer Overflow

Release adaptation S20

5240-Marcus Xenakis Carapace Command Exec

5241-Avenger System Command Exec

9000-Back Door Probe (TCP 12345)

9001-Back Door Probe (TCP 31337)

9002-Back Door Probe (TCP 1524)

9003-Back Door Probe (TCP 2773)

9004-Back Door Probe (TCP 2774)

9005-Back Door Probe (TCP 20034)

9006-Back Door Probe (TCP 27374)

Release adaptation S19

3166- FTP USER Suspicious Length

3703-Squid FTP URL Buffer Overflow

5232-URL with XSS

5234-pforum sql-injection

5236-Xoops sql-injection

5237-HTTP CONNECT Tunnel

5238-EZNET Ezboard Buffer Overflow

5239-Sambar cgitest.exe Buffer Overflow

Release adaptation S18

3164- Instant Server Mini Portal Agenda Bridge

3405- Avirt Gateway proxy Buffer Overflow

3701-Oracle 9iAS Web Cache Buffer Overflow

5227- AHG Search Engine Command Exec

5229- DCP Portal Root Path Acknowledgment

5230- Lotus Domino Authentication Bypass

5231- MRTG Agenda Bridge

5233-PHP fileupload Buffer Overflow

Release adaptation S17

4507-SNMP Protocol Violation

5223-Pi3Web Buffer Overflow

5224-SquirrelMail SquirrelSpell Command Exec

Release adaptation S16

4506-D-Link Wireless SNMP Plain Text Password

5197-Network Query Tool command Exec

5201-PHP-Nuke Cross Site Scripting

5203- Hosting Controller File Admission and Upload

5205-Apache php.exe File Acknowledgment

5209-Agora.cgi Cross Site Scripting

5210-FAQManager.cgi agenda bridge

5211-zml.cgi File Acknowledgment

5212-Bugzilla Admin Authorization Bypass

5213-Bugzilla Command Exec

5214-FAQManager.cgi absent bytes

5215-lastlines.cgi cmd exec/traversal

5216-PHP Rocket Agenda Bridge

5217-Webmin Agenda Bridge

5218-Boozt Buffer Overflow

5219-Lotus Domino database DoS

5220-CSVForm Remote Command Exec

5221-Hosting Controller Agenda Bridge

Release adaptation S15

3700-CDE dtspcd overflow

Release adaptation S14

3404-SysV /bin/login Overflow

3458-AIM bold allure overflow

3459-ValiCert forms.exe overflow

4058-UPnP LOCATION Overflow

5202- PHP-Nuke File Copy / Delete

5204-AspUpload Sample Scripts

5206-Horde IMP Session Hijack

5207-Entrust GetAccess agenda bridge

5208-Network Tools carapace metacharacters

Release adaptation S13

3117-KLEZ bastard

3118-rwhoisd architecture cord

3119-WS_FTP STAT overflow

3120-ANTS virus

3163-wu-ftpd abundance bribery vulnerability

3403-Telnet Excessive Environment Options

3456- Solaris in.fingerd Information Leak

3501-Rlogin Long TERM Variable

5183-PHP File Inclusion Remote Exec

5191-Active Perl PerlIS.dll Buffer Overflow

5194-Apache Server .ht File Admission

5195-AS/400 '/' advance

5196-Red Hat Stronghold Recon advance

5199-W3Mail Command Exec

5200-IIS Data Stream Antecedent Acknowledgment