Rule Document 1:66724

Rule Category

SERVER-OTHER -- Snort has detected traffic exploiting vulnerabilities in a server in the network.

Alert Message

SERVER-OTHER Git server apply reject arbitrary file write attempt

Rule Explanation

This rule looks for strings known to be specific to files that are intended to exploit an arbitrary file write vulnerability in a Git server.

What To Look For

This rule looks for attempts to exploit an arbitrary file write vulnerability in a Git Server.

Known Usage

Public information/Proof of Concept available

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group