Rule:--Sid:961--Summary:This event is generated when an attempt is made to exploit a known vulnerability in a web server running Microsoft FrontPageServer Extensions.--Impact:Information gathering and system integrity compromise. Possible unauthorizedadministrative access to the server or application. Possible executionof arbitrary code of the attackers choosing in some cases. Denial ofService is possible.--Detailed Information:This event is generated when an attempt is made to compromise a hostrunning Microsoft FrontPage Server Extensions. Many knownvulnerabilities exist for this platform and the attack scenarios arelegion.--Affected Systems:	Systems using Microsoft FrontPage Server Extensions 98--Attack Scenarios:Many attack vectors are possible from simple directory traversal toexploitation of buffer overflow conditions.--Ease of Attack:Simple. Many exploits exist.--False Positives:None known.--False Negatives:None known.--Corrective Action:Ensure the system is using an up to date version of the software and hashad all vendor supplied patches applied.--Contributors:Sourcefire Research TeamBrian Caswell <bmc@sourcefire.com>Nigel Houghton <nigel.houghton@sourcefire.com>--Additional References:Microsoft:http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/Q188/2/57.ASP&NoWebContent=1&NoWebContent=1--