Rule History

SID: 2016841 • Source: et/open

Versions (3)

Version DetailsCurrent

Rev: 5 • May 9, 2013, 12:00 PM

Message:

ET WEB_SERVER ColdFusion path disclosure to get the absolute path

Rule:

alert http any any -> $HTTP_SERVERS any (msg:"ET WEB_SERVER ColdFusion path disclosure to get the absolute path"; flow:established,to_server; http.method; content:"GET"; nocase; http.uri; content:"/administrator/analyzer/index.cfm"; nocase; http.uri.raw; content:"|2e 2e 2f|"; reference:url,www.exploit-db.com/exploits/25305/; classtype:web-application-attack; sid:2016841; rev:5; metadata:created_at 2013_05_09, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_04_24;)

Created:

May 9, 2013, 12:00 PM

Updated:

Apr 24, 2020, 12:00 PM

DB Created:

Sep 21, 2024, 3:00 AM

DB Updated:

Nov 3, 2025, 10:34 PM

Filename:

rules/emerging-web_server.rules