Rule History

alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Process Kill"; flow:established,to_server; http.uri; content:"/status-processes.sh"; http.request_body; content:"signal=SIGILL&pid="; fast_pattern; content:"&kill=+Send+"; reference:url,exploit-db.com/exploits/45036/; classtype:attempted-dos; sid:2025849; rev:2; metadata:attack_target Server, created_at 2018_07_17, deployment Datacenter, performance_impact Low, signature_severity Major, updated_at 2020_08_25;)