""ET WEB_SERVER Possible CVE-2014-6271 Attempt in HTTP Cookie""

SID: 2019239

Revision: 2

Class Type: attempted-admin

Metadata: created_at 2014_09_25, cve CVE_2014_6271, updated_at 2014_10_01

Reference:

• Link

Protocol: tcp

Source Network: any

Source Port: any

Destination Network: $HTTP_SERVERS

Destination Port: $HTTP_PORTS

Flow: established,to_server

Contents:

• Value: "|28 29 20 7b|"

• Value: "|28 29 20 7b|"

Within:

PCRE:

Special Options:

• http_cookie

source