HTTP: Safari SSH URI Handler Command Execution
This signature detects attempts to exploit a known malicious link vulnerability against the Safari browser. Attackers can embed a malicious link in a Web page; when the link is viewed by a Safari browser, the attacker can execute local commands using the SSH URI handler on the affected system.
Extended Description
A vulnerability in Safari for Mac OS X could allow an attacker to execute arbitrary commands on the vulnerable system with the privileges of the account running the Safari browser.
Short Name
HTTP:STC:SAFARI:SSH-URI
Severity
Critical
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2004-0489 Command Execution Handler SSH Safari URI
Release Date
06/03/2004
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown
CVSS Score
7.6