Signature 5245 "HTTP 1.1 Chunked Encoding Transfer"

[astuckey]

Does this signature provide coverage for CVE list candidate CAN-2002-0845?

This CVE number is not referenced in the NSDB description.

[mcerha · Accepted solution]

Yes, 5245 should provide coverage for this vulnerability. HTTP chunked encoding is a rarely used feature of the HTTP protocol, so we felt it better to write a generic signature to cover a range of similar buffer overflow problems than to author specific narrow signatures.