HTTP_ActivePerl

	B O A R D
	» Board » Zadaj pytanie » Archiwum » Szukaj » Stylizacja

M E N U

» Nowości

» Archiwum

» Recenzje / Testy

» Board

» Rejestracja

Szukaj @ TwojePC

	OBECNI NA TPC
	» Kenny 06:23 » PeKa 05:07 » PCCPU 02:08 » Visar 02:08 Dzisiaj przeczytano 134170 postów, wczoraj 557004 Szybkie ładowanie jest: włączone.

ccc

A R C H I W A L N A W I A D O M O Ś Ć

HTTP_ActivePerl_Overflow? , konraf 17/01/04 11:50
Witam

Od kilku dni NIS 2004 bardzo czesto informuje mnie o jakiejs "aktywnosci" w postaci HTTP_ActivePerl_Overflow.
Co to za cholerstwo?

Bartek
www.aztec.pl
konraf@aztec.pl

Proszę bardzo: , Marcinex 17/01/04 13:55
HTTP_ActivePerl_Overflow
Severity: Medium

This attack could pose a moderate security threat. It does not require immediate action.

Attack Category: Suspicious Activity

Anomalous network conditions or traffic patterns. A suspicious activity signature, for example, might detect two systems with identical IP addresses, a condition that indicates an attempted IP spoofing attack.

Description

Older versions of ActivePerl on Windows have a buffer overflow vulnerability. An attacker can exploit this vulnerability to execute arbitrary code at the privilege level of the Web server process. This signature detects attempts to exploit the ActivePerl vulnerability through HTTP.

Vulnerable Components

Activestate ActivePerl Version 5.6.1.629 and earlier on Windows

False Positive

This signature may not indicate malicious intent if ActivePerl versions other than those listed above are used or ActivePerl is not used at all. In this case, you can exclude this signature from monitoring.
Nie ma piekła poza tym światem, on nim
jest, nie ma diabła poza człowiekiem,
on nim jest!