Sagan high stable other

[LINUX-POLKIT] POLKIT PRIVILEGE ESCALATION ARTIFACT (CVE-2021-4034)

Detection Logic

alert any $HOME_NET any -> $EXTERNAL_NET any (msg:"[LINUX-POLKIT] POLKIT PRIVILEGE ESCALATION ARTIFACT (CVE-2021-4034)"; content: "GCONV_PATH
| 3d
| ";nocase; classtype: exploit-attempt; threshold: type suppress, track by_src, count 1, seconds 300; reference: url,github.com/berdav/CVE-2021-4034/blob/main/pwnkit.c; sid:5005968; rev:1;)

Field Validations

Loading…

Comments (0)

Loading comments...