Sagan high stable other

[LINUX-POLKIT] POLKIT PRIVILEGE ESCALATION ARTIFACT (CVE-2021-4034)

[LINUX-POLKIT] POLKIT PRIVILEGE ESCALATION ARTIFACT (CVE-2021-4034)

View Source

Detection Logic

alert any $HOME_NET any -> $EXTERNAL_NET any (msg:"[LINUX-POLKIT] POLKIT PRIVILEGE ESCALATION ARTIFACT (CVE-2021-4034)"; content: "The value for environment variable";nocase; content:"contains suscipious content";nocase;threshold: type suppress, track by_src, count 1, seconds 300; classtype: exploit-attempt; reference: url,zdnet.com/article/major-linux-policykit-security-vulnerability-uncovered-pwnkit/; sid:5005970; rev:1;)

Field Validations

Loading…

Comments (0)

Loading comments...