HTTP: Unix File /etc/passwd Probe

This signature detects attempts to access the main password file. If the server does not use shadowed passwords, attackers can compromise user passwords through brute force or add themselves to the system.

Extended Description

Successful exploitation of the vulnerability could enable a remote attacker to gain a user list to be used in a brute force attack.

References

CVE: CVE-2024-23334

URL: https://www.exploit-db.com/exploits/15913 https://www.exploit-db.com/exploits/14647 https://www.exploit-db.com/exploits/12260

Short Name

HTTP:UNIX-FILE:ETC-PASSWD

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Unix File /etc/passwd Probe

Extended Description

References

Found a potential security threat?