""GPL FTP SITE NEWER attempt""

SID: 2101864

Revision: 8

Class Type: attempted-dos

Metadata: created_at 2010_09_23, cve CVE_1999_0880, updated_at 2011_05_02

Reference:

  • nessus

  • 10319

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $HOME_NET

Destination Port: 21

Flow: to_server,established

Contents:

  • Value: "SITE"

  • Value: "NEWER"

Within:

PCRE: "/^SITE\s+NEWER/smi"

Special Options:

  • nocase

  • nocase

source