2229.txt

snort入侵检测规则文件2.4 Snort是众所周知的网络入侵检测工具

Rule:  

--
Sid:
2229

--
Summary:
This event is generated when an attempt is made to exploit a known 
vulnerability in the PHP application phpBB.

--
Impact:
Information disclosure possibly leading to serious system compromise.

--
Detailed Information:
Some versions of phpBB Group phpBB suffer from a vulnerability that 
allows an attacker to inject SQL queries of their choosing.

This can result in the disclosure of passwords and other information 
stored in the database. The data contained in the database may also be 
corrupted by a malicious SQL query.

--
Affected Systems:
	phpBB Group phpBB 2.0.4, 2.0.5

--
Attack Scenarios:
The attacker can execute one of the publicly available exploit scripts.
--
Ease of Attack:
Simple. Exploit code exists.

--
False Positives:
None known.

--
False Negatives:
None known.

--
Corrective Action:
Upgrade to the latest non-affected version of the software.

--
Contributors:
Sourcefire Research Team
Brian Caswell <[e-mail]>
Nigel Houghton <[e-mail]>

-- 
Additional References:

--