Versions (3)
Version DetailsCurrent
Rev: 9 • Jul 30, 2010, 12:00 PMET WEB_SPECIFIC_APPS TWiki Configure Script TYPEOF Remote Command Execution Attempt
alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS TWiki Configure Script TYPEOF Remote Command Execution Attempt"; flow:established,to_server; http.uri; content:"|26|TYPEOF"; fast_pattern; nocase; pcre:"/&TYPEOF\:.+system\s*\(/i"; reference:cve,CVE-2006-3819; reference:bugtraq,19188; classtype:web-application-attack; sid:2003085; rev:9; metadata:created_at 2010_07_30, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_10;)
Jul 30, 2010, 12:00 PM
Mar 10, 2024, 12:00 PM
Sep 21, 2024, 3:00 AM
Nov 7, 2025, 9:34 PM
rules/emerging-web_specific_apps.rules