Project

General

Profile

Actions
Copy link

Security #2969

closed
AA PA

http_header signature do not alert on HTTP response with a single \r\n ending

Security #2969: http_header signature do not alert on HTTP response with a single \r\n ending

Added by ajaxtpm ajaxtpm almost 7 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
4.1.5
Affected Versions:
4.1.4
Label:
CVE:
2019-17420
Git IDs:
Severity:
Disclosure Date:

Description

Signature:
alert http any any -> any any (msg: "'ng1nx' Server header found"; flow: established, from_server; content: "ng1nx"; nocase; http_header; classtype: attempted-admin; sid: 1; rev: 1; )

Pcap attached

Files

ng1nx.pcap (1.01 KB) ng1nx.pcap ajaxtpm ajaxtpm, 05/07/2019 11:25 AM

Related issues 2 (0 open — 2 closed)

Related to Suricata - Task #3141: libhtp 0.5.31ClosedVictor JulienActions
Related to Suricata - Task #3142: libhtp 0.5.31 (4.1.x)ClosedVictor JulienActions
Actions
Copy link

Also available in: PDF Atom