Attachment 151718 Details for Bug 235304 – patch to modsecurity_crs_50_outbound.conf

[patch] patch to modsecurity_crs_50_outbound.conf

mod_security-outbound.patch (text/plain), 1.60 KB, created by Gilbert E. Detillieux on 2007-04-04 23:07:25 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Gilbert E. Detillieux

Created: 2007-04-04 23:07:25 UTC

Size: 1.60 KB

patch

obsolete

>--- modsecurity_crs_50_outbound.conf.FC5	2007-04-02 06:03:18.000000000 -0500
>+++ modsecurity_crs_50_outbound.conf	2007-04-04 17:29:36.000000000 -0500
>@@ -51,12 +51,14 @@
> SecRule RESPONSE_BODY "(?:\b(?:(?:s(?:erver\.(?:(?:(?:htm|ur)lencod|execut)e|createobject|mappath)|cripting\.filesystemobject)|(?:response\.(?:binary)?writ|vbscript\.encod)e|wscript\.(?:network|shell))\b|javax\.servlet|<jsp:)|\.(?:(?:(?:createtex|ge)t|loadfrom)file|addheader)\b)" \
>         "ctl:auditLogParts=+E,log,auditlog,msg:'ASP/JSP source code leakage',id:'970014',severity:'4'"
> SecRule RESPONSE_BODY "\<\%" "chain,ctl:auditLogParts=+E,log,auditlog,msg:'ASP/JSP source code leakage',id:'970903',severity:'4'"
>+SecRule RESPONSE_HEADERS:Content-Encoding "^$" "chain"
> SecRule RESPONSE_BODY "!(?:\b(?:(?:i(?:nterplay|hdr|d3)|m(?:ovi|thd)|(?:ex|jf)if|f(?:lv|ws)|varg|cws)\b|r(?:iff\b|ar!B)|gif)|B(?:%pdf|\.ra)\b)" 
> 
> SecRule RESPONSE_BODY "(?:\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open)|\$_(?:(?:pos|ge)t|session))\b" \
>      "ctl:auditLogParts=+E,log,auditlog,msg:'PHP source code leakage',id:'970015',severity:'4'"
> SecRule RESPONSE_BODY "<\?(?!xml)" \
> 	 "chain,ctl:auditLogParts=+E,log,auditlog,msg:'PHP source code leakage',id:'970902',severity:'4'"
>+SecRule RESPONSE_HEADERS:Content-Encoding "^$" "chain"
> SecRule RESPONSE_BODY "!(?:\b(?:(?:i(?:nterplay|hdr|d3)|m(?:ovi|thd)|(?:ex|jf)if|f(?:lv|ws)|varg|cws)\b|r(?:iff\b|ar!B)|gif)|B(?:%pdf|\.ra)\b)"        
> 
> SecRule RESPONSE_BODY "\b<cf" \

Actions: View | Diff

Attachments on bug 235304: 151718