ATTACK [PTsecurity] Apache2 <2.2.34 <2.4.27 Optionsbleed (CVE-2017-9798) Attempt

SID: 10001948Rev: 11 views
Sourceptresearch/attackdetection
CreatedJuly 25, 2019
UpdatedJuly 25, 2019
Classificationattempted-recon
alert http any any -> $HOME_NET any (msg:"ATTACK [PTsecurity] Apache2 <2.2.34 <2.4.27 Optionsbleed (CVE-2017-9798) Attempt"; flow:established, to_server; content:"OPTIONS"; http_method; threshold:type both, track by_src, count 20, seconds 30; reference:cve, 2017-9798; reference:url, blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html; reference:url, github.com/ptresearch/AttackDetection; metadata:Open Ptsecurity.com ruleset; metadata:updated_at 2019_07_25; classtype:attempted-recon; sid:10001948; rev:1;)

References

cve2017-9798
urlblog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html
urlgithub.com/ptresearch/AttackDetection

Metadata

OpenPtsecurity.com ruleset

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!