Rule History

SID: 2014986 • Source: et/open

Versions (2)

Version DetailsCurrent

Rev: 3 • Jun 29, 2012, 12:00 PM

Message:

ET WEB_SERVER possible IBM Rational Directory Server (RDS) Help system href browser redirect

Rule:

alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SERVER possible IBM Rational Directory Server (RDS) Help system href browser redirect"; flow:established,to_server; http.uri; content:"/rds-help/advanced/deferredView.jsp?"; nocase; content:"href="; nocase; pcre:"/^\s*(?:ftps?|https?|php)\:\//Ri"; reference:url,secunia.com/advisories/49627/; classtype:web-application-attack; sid:2014986; rev:3; metadata:created_at 2012_06_29, signature_severity Informational, updated_at 2020_04_21;)

Created:

Jun 29, 2012, 12:00 PM

Updated:

Apr 21, 2020, 12:00 PM

DB Created:

Sep 21, 2024, 3:00 AM

DB Updated:

May 30, 2025, 12:04 AM

Filename:

rules/emerging-web_server.rules