Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:DIR:HTTP-COOKIE-HDR |
|---|---|
Severity |
Minor |
Recommended |
No |
Category |
HTTP |
Keywords |
Directory Traversal Detected on HTTP Cookie Header |
Release Date |
2015/02/25 |
Update Number |
2470 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Directory Traversal Detected on HTTP Cookie Header
This signature detects attempts to exploit a known flaw in HTTP cookie header. A successful attack can result in directory traversal attacks.
Extended Description
On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cause a DoS.
Affected Products
- Trendmicro threat_discovery_appliance 2.6.1062
References
- BugTraq: 97599
- CVE: CVE-2016-7552