ET NETBIOS Microsoft Windows NETAPI Stack Overflow Inbound - MS08-067 (5) - Suricata Rule 2008694 (et/open)

ET NETBIOS Microsoft Windows NETAPI Stack Overflow Inbound - MS08-067 (5)

7.0.3 5.0SID: 2008694Rev: 6Enabled6 viewsHistory

Fileemerging-netbios.rules

CreatedJuly 30, 2010

UpdatedOctober 19, 2026

Classificationattempted-admin

alert udp any any -> $HOME_NET 139 (msg:"ET NETBIOS Microsoft Windows NETAPI Stack Overflow Inbound - MS08-067 (5)"; dcerpc.iface:4b324fc8-1670-01d3-1278-5a47bf6ee188; dcerpc.opnum:31; dcerpc.stub_data; content:"|00 2E 00 2E 00 5C 00 2E 00 2E 00 5C|"; reference:url,www.microsoft.com/technet/security/Bulletin/MS08-067.mspx; reference:cve,2008-4250; reference:url,www.kb.cert.org/vuls/id/827267; classtype:attempted-admin; sid:2008694; rev:6; metadata:created_at 2010_07_30, cve CVE_2008_4250, confidence Medium, signature_severity Major, updated_at 2026_10_19;)

References

url	www.microsoft.com/technet/security/Bulletin/MS08-067.mspx
cve	2008-4250
url	www.kb.cert.org/vuls/id/827267

Metadata

created at2010_07_30

cve

CVE-2008-4250

confidenceMedium

signature severityMajor

updated at2026_10_19

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!