Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:STC:SAFARI:SSH-URI |
|---|---|
Severity |
Critical |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Safari SSH URI Handler Command Execution |
Release Date |
2004/06/02 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Safari SSH URI Handler Command Execution
This signature detects attempts to exploit a known malicious link vulnerability against the Safari browser. Attackers can embed a malicious link in a Web page; when the link is viewed by a Safari browser, the attacker can execute local commands using the SSH URI handler on the affected system.
Extended Description
A vulnerability in Safari for Mac OS X could allow an attacker to execute arbitrary commands on the vulnerable system with the privileges of the account running the Safari browser.
References