alert http1 $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"GPL WEB_SERVER WEBDAV nessus safe scan attempt"; flow:established,to_server; http.start; content:"SEARCH|20|/|20|HTTP/1.1|0d 0a|Host|3a|"; startswith; fast_pattern; content:"|0d 0a 0d 0a|"; within:255; reference:bugtraq,7116; reference:cve,2003-0109; reference:nessus,11412; reference:nessus,11413; reference:url,www.microsoft.com/technet/security/bulletin/ms03-007.mspx; classtype:attempted-admin; sid:2102091; rev:14; metadata:created_at 2010_09_23, signature_severity Unknown, updated_at 2024_04_03;)