Chris_H_33818
Apr 15, 2015Nimbostratus
MS15-034
MS15-034 is a critical issue which we are looking at patching but we would like to apply an irule to filter for any exploit for our customers who haven't patched.
There is no exploit yet but it's likely to be coming soon, here is an initial test.
http://pastebin.com/raw.php?i=ypURDPc4
The unsigned 64bit number is the key and it would be great if someone much cleverer that I could write an irule for bigip to drop and log any http requests containing this.