ET WEB_SERVER Apache APR apr_fnmatch Stack Overflow Denial of Service

7.0.3 5.0SID: 2012926Rev: 4Enabled2 views

Fileemerging-web_server.rules

CreatedJune 2, 2011

UpdatedApril 20, 2020

Classificationattempted-dos

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_SERVER Apache APR apr_fnmatch Stack Overflow Denial of Service"; flow:to_server,established; urilen:>1400; http.uri; content:"|2F 3F|P|3D 2A 3F 2A 3F 2A 3F 2A 3F 2A 3F|"; pcre:"/(?:\x2a\x3f){700}/"; reference:cve,2011-0419; reference:url,cxib.net/stuff/apr_fnmatch.txt; reference:url,bugzilla.redhat.com/show_bug.cgi?id=703390; classtype:attempted-dos; sid:2012926; rev:4; metadata:created_at 2011_06_02, cve CVE_2011_0419, confidence Medium, signature_severity Major, updated_at 2020_04_20;)

References

cve	2011-0419
url	cxib.net/stuff/apr_fnmatch.txt
url	bugzilla.redhat.com/show_bug.cgi?id=703390

Metadata

created at2011_06_02

cve

CVE-2011-0419

confidenceMedium

signature severityMajor

updated at2020_04_20

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!