Shellshock mitigation with BIG-IP iRules

Yesterday, NIST released information on a new network exploitable vulnerability in the GNU Bash shell as demonstrated by vectors involving parts of OpenSSH sshd, the mod_cgi, and mod_cgid modules in ...
Updated Jun 06, 2023
Version 2.0
application delivery
devops
iRules
security
shellshock
Gary_Zhu's avatar
Gary_Zhu
Icon for Nimbostratus rankNimbostratus
Sep 26, 2014
We have below User-Agent string, I know it does not match your pattern, but very close. Is it possible that string pattern might reject a valid User-Agent ? RFC does not say you cannot have ( and ) and then {. By the way, reject is much better than 403 error that I set. Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; SIMBAR ={0D6844D1-DC9B-11E1-B086-00A0C6000000}; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.1; OfficeLiveConnector.1.3; OfficeLivePatch.0.0; .NET4.0C; .NET4.0E)