ET EXPLOIT F5 BIG-IP rsync cmi authorized_keys successful exfiltration
Sourceet/open
CreatedAugust 29, 2014
UpdatedMay 30, 2023
Classificationattempted-admin
alert tcp any 873 -> any any (msg:"ET EXPLOIT F5 BIG-IP rsync cmi authorized_keys successful exfiltration"; flow:from_server,established; content:"ssh-rsa"; fast_pattern; flowbits:isset,ET.F5.key; reference:url,www.security-assessment.com/files/documents/advisory/F5_Unauthenticated_rsync_access_to_Remote_Root_Code_Execution.pdf; classtype:attempted-admin; sid:2019089; rev:4; metadata:created_at 2014_08_29, signature_severity Critical, updated_at 2023_05_30;)
Metadata
created at2014_08_29
signature severityCritical
updated at2023_05_30
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!