Previous Topic: Mail Server ExploitNext Topic: E-Mail Exploit Action


Source Disclosure Attack Action

The Source Disclosure Attack action deals with the expression of event information pertaining to the attacks directed against web servers that process dynamic pages. The attack tries to access source code that can include installation information, such as user IDs and passwords to access databases. This form of attack can be made by issuing a special URL that the server processes incorrectly, or that makes the server execute some software components that can contain errors or bugs.

Information

Level

Source - User Information

Secondary

Source - Host Information

Tertiary

Source - Object Information

Tertiary

Source - Process Information

Tertiary

Source - Group Information

Tertiary

Dest - User Information

Tertiary

Dest - Host Information

Primary

Dest - Object Information

Primary

Dest - Group Information

Tertiary

Agent - Information

Primary

Agent - Host Information

Primary

Event Source - Host Information

Primary

Event Source - Information

Tertiary

Event - Information

Primary

Result - Information

Primary

Result

event_result

event_severity

Success

S

6

Failure

F

5