HTTP: Unsafe File Extension
This signature detects a HTTP request for downloading a file with an "unsafe" extension using Internet Explorer. Microsoft has announced that using Internet Explorer to download files with certain extensions can be unsafe. See the references for more information.
References
BugTraq: 42154
CVE: CVE-2010-2709
URL: http://www.cknow.com/vtutor/FileExtensions.html http://support.microsoft.com/?kbid=291369
Short Name
HTTP:EXT:DOT-UNSAFE
Severity
Warning
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
CVE-2010-2709 Extension File Unsafe bid:42154
Release Date
05/17/2006
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3724
False Positive
Unknown
CVSS Score
9.3