Sid 1-51547

Rule Documentation
References

Rule Category

SERVER-APACHE -- Snort has detected traffic exploiting vulnerabilities in Apache servers.

Alert Message

SERVER-APACHE Apache cookie logging denial of service attempt

Rule Explanation

This event is generated when an Apache cookie logging denial of service attempt is detected. Impact: Detection of a Denial of Service Attack Details: Ease of Attack:

What To Look For

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group

MITRE ATT&CK Framework

Tactic:

Technique:

For reference, see the MITRE ATT&CK vulnerability types here: https://attack.mitre.org

CVE

CVE-2014-0098

Rule Vulnerability

CVE Additional Information

CVE-2014-0098

The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.

Details
Severity	MEDIUM	Base Score	5.0
Impact Score	2.9	Exploit Score	10.0
Confidentiality Impact	NONE	Integrity Impact	NONE
Availability Impact	PARTIAL	Access Vector
Authentication	NONE	Ease of Access