Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I run a small web server. Apache Struts CVE-2017-5638

blog.trendmicro.com

Post reply on HN
Print view View original

1–3 of 3 posts

Re: I run a small web server. Apache Struts CVE-2017-5638

#2

Post by rossrubacon »

I checked my debian install dpkg -l |grep struts

I do not have it installed. so nothing to patch. i was thinking of making a fail2ban filter to add people who scan for the exploit to a list I share among my different servers to block it but still not clear what to look for in the logs

Re: I run a small web server. Apache Struts CVE-2017-5638

#3

Post by rbirnie »

rossrubacon wrote: post #2

I checked my debian install dpkg -l |grep struts I do not have it installed. so nothing to patch. i was thinking of making a fail2ban filter to add people who scan for the exploit to a list I share among my different servers to block it but still not clear what to look for in the logs

dpkg might not show it. Struts can be bundled in any java application and you'd never know.
Post reply on HN