Rule:  --Sid:1072--Summary:This event is generated when an attempt is made to execute a directorytraversal attack.--Impact:Information disclosure. This is a directory traversal attempt which canlead to information disclosure and possible exposure of sensitivesystem information.--Detailed Information:Directory traversal attacks usually target web, web applications and ftpservers that do not correctly check the path to a file when requested bythe client.This can lead to the disclosure of sensitive system information which maybe used by an attacker to further compromise the system.--Affected Systems:--Attack Scenarios:An authorized user or anonymous user can use the directory traversal technique, to browse folders outside the ftp root directory. Informationgathered may be used in further attacks against the host.--Ease of Attack:Simple. No exploit software required.--False Positives:None known--False Negatives:None known--Corrective Action:Apply the appropriate vendor supplied patchesUpgrade the software to the latest non-affected version.--Contributors:Sourcefire Research TeamBrian Caswell <bmc@sourcefire.com>Nigel Houghton <nigel.houghton@sourcefire.com>-- Additional References:--