Rule History

SID: 2024760 • Source: et/open

Versions (2)

Version DetailsCurrent

Rev: 5 • Sep 19, 2017, 12:00 PM

Message:

ET WEB_SERVER OptionsBleed (CVE-2017-9798)

Rule:

alert http $HTTP_SERVERS any -> $EXTERNAL_NET any (msg:"ET WEB_SERVER OptionsBleed (CVE-2017-9798)"; flow:from_server; http.header; content:"Allow|3a 20|"; pcre:"/^[^\n]+(?:[^ -~\x0d\x0a]|,\x20*,)/R"; reference:cve,CVE-2017-9798; classtype:misc-activity; sid:2024760; rev:5; metadata:affected_product Apache_HTTP_server, attack_target Server, created_at 2017_09_19, deployment Datacenter, performance_impact Significant, signature_severity Minor, updated_at 2020_08_12;)

Created:

Sep 19, 2017, 12:00 PM

Updated:

Aug 12, 2020, 12:00 PM

DB Created:

Sep 19, 2017, 12:00 PM

DB Updated:

May 31, 2024, 9:00 PM

Filename:

rules/emerging-web_server.rules