ModSecurity 2.5.3 (Stable branch) |
|
|
ModSecurity is an intrusion detection and
prevention engine for Web applications (sometimes called a Web application firewall). Operating embedded or as part of an Apache reverse proxy, it increases Web application security, protecting Web applications from known and unknown attacks. It is flexible and easy to configure. It monitors HTTP traffic (including POST payloads), detects or prevents attacks, enhances logging, performs anti-evasion, and allows administrators to create custom rules to suit their specific needs. It excels in HTTP traffic monitoring and just-in-time vulnerability patching.
License: GNU General Public License v2
Changes:
This release fixes a few minor issues with the exec action, macro expansion, and a potential crash when a persistent variable name is too large. The included Core Rules fixes a number of issues that may miss detection. Please consider Core Rules 1.6.1 a required upgrade if you are currently running 1.6.0.
|
