Forum Discussion

Joe_M's avatar
Joe_M
Icon for Nimbostratus rankNimbostratus
May 10, 2013

CVE-2012-0053 Mitigation iRule

Not sure if this actually works or not, but here you go!

 

when HTTP_RESPONSE {

 

if { [HTTP::status] == "400" } {

 

HTTP::header remove "Set-Cookie"

 

log local0. "CVE-2012-0053 Mitigation"

 

}

 

}

 

application delivery
dev
devops
iRules

1 Reply

  • The_Bhattman's avatar
    The_Bhattman
    Icon for Nimbostratus rankNimbostratus
    May 14, 2013
    For those that want to see the exploit courtesy of Jonathan Simon Prates via Youtube (http://www.youtube.com/watch?v=Hrt32bPuxBA)

     

     

    The Bhattman