""ET EXPLOIT Possible Apache log4j Uncontrolled Recursion Lookup (CVE-2021-45105)""

SID: 2034839

Revision: 1

Class Type: attempted-admin

Metadata: created_at 2021_12_22, cve CVE_2021_45105, updated_at 2021_12_22, reviewed_at 2024_05_07

Reference:

  • cve

  • 2021-45105

Protocol: tcp

Source Network: any

Source Port: any

Destination Network: [$HOME_NET,$HTTP_SERVERS]

Destination Port: any

Flow: established,to_server

Contents:

  • Value: "|24 7b 24 7b 3a 3a 2d 24 7b 3a 3a 2d 24 24 7b 3a 3a 2d|"

  • Value: "|7d 7d 7d 7d|"

Within: 6

PCRE:

Special Options:

  • fast_pattern

source