ET WEB_SPECIFIC_APPS Apache ActiveMQ File Upload RCE (CVE-2016-3088)
Sourceet/open
Fileemerging-web_specific_apps.rules
CreatedMay 10, 2018
UpdatedApril 20, 2024
Classificationattempted-admin
alert http any any -> $HTTP_SERVERS 8161 (msg:"ET WEB_SPECIFIC_APPS Apache ActiveMQ File Upload RCE (CVE-2016-3088)"; flow:established,to_server ; http.method; content:"MOVE"; http.header_names; to_lowercase; content:"|0d 0a|destination|0d 0a|"; fast_pattern; reference:cve,2016-3088 ; reference:url,www.exploit-db.com/exploits/42283/ ; classtype:attempted-admin; sid:2025574; rev:4; metadata:attack_target Web_Server, created_at 2018_05_10, cve CVE_2016_3088, deployment Datacenter, signature_severity Minor, tag CISA_KEV, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_04_20;)
References
Metadata
attack targetWeb_Server
created at2018_05_10
deploymentDatacenter
signature severityMinor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_04_20
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!