Update CVE-2017-7269.yaml

patch-1
Prince Chaddha 2022-05-12 16:45:13 +05:30 committed by GitHub
parent 12a8850815
commit 40e9cf9f8d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 7 deletions

View File

@ -15,7 +15,7 @@ info:
cvss-score: 9.8
cve-id: CVE-2017-7269
cwe-id: CWE-119
tags: cve,cve2017,rce,windows
tags: cve,cve2017,rce,windows,iis
requests:
- method: OPTIONS
@ -24,22 +24,21 @@ requests:
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
part: header
words:
- "IIS/6.0"
part: header
- type: dsl
part: header
dsl:
- regex("<DAV:sql>", dasl) # lowercase header name: DASL
- regex("[\d]+(,\s+[\d]+)?", dav) # lowercase header name: DAV
- regex(".*?PROPFIND", public) # lowercase header name: Public
- regex(".*?PROPFIND", allow) # lowercase header name: Allow
condition: or
part: header
- type: status
status:
- 200
# Enhanced by mp on 2022/05/11