Malicious.HTTP.URI.Requests

Description

This indicates detection of HTTP requests with suspicious URI.
Without sufficient sanitizing of user-supplied inputs to a web-server, this could potentially lead to various issues such as exposing buffer overflow vulnerabilities and remote code execution. A remote attacker may be able to exploit this to execute arbitrary code within the context of the application.

Affected Products

Any unprotected HTTP server is vulnerable

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Monitor the traffic from that network for any suspicious activity.

References

https://github.com/kkirsche/CVE-2004-2271 http://www.exploit-db.com/exploits/26739/ http://www.exploit-db.com/exploits/18604/