Intrusion PreventionHTTP.Request.UserAgent.XSS
Description
This indicates an attack attempt against a cross-site scripting vulnerability in raSMP.
A vulnerability has been reported in raSMP that may allow an attacker to execute shell commands on a vulnerable system. This is possible because the user input filters fail to properly sanitize the User-Agent header that is passed to "index.php". An attacker may include shell commands by supplying an injection string through the HTTP header.
Affected Products
raSMP raSMP 2.0 .0
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Currently we are not aware of any officially supplied patch for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2021-07-26 | 18.126 | Sig Added |
| ID | 18070 |
| Created | Feb 23, 2010 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2006-0084 |
| Exploit Prediction Score | 4.16% |
| Default Action | pass |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | PHP_app |