ET WEB_SERVER Apache APR apr_fnmatch Stack Overflow Denial of Service

7.0.3 5.0SID: 2012926Rev: 5Enabled2 views

Fileemerging-web_server.rules

CreatedJune 2, 2011

UpdatedMarch 6, 2024

Classificationattempted-dos

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_SERVER Apache APR apr_fnmatch Stack Overflow Denial of Service"; flow:established,to_server; urilen:>1400; http.uri; content:"|2F 3F|P|3D 2A 3F 2A 3F 2A 3F 2A 3F 2A 3F|"; pcre:"/(?:\x2a\x3f){700}/"; reference:cve,2011-0419; reference:url,cxib.net/stuff/apr_fnmatch.txt; reference:url,bugzilla.redhat.com/show_bug.cgi?id=703390; classtype:attempted-dos; sid:2012926; rev:5; metadata:created_at 2011_06_02, cve CVE_2011_0419, confidence Medium, signature_severity Major, updated_at 2024_03_06;)

References

cve	2011-0419
url	cxib.net/stuff/apr_fnmatch.txt
url	bugzilla.redhat.com/show_bug.cgi?id=703390

Metadata

created at2011_06_02

cve

CVE-2011-0419

confidenceMedium

signature severityMajor

updated at2024_03_06

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!