ET NETBIOS Microsoft Windows NETAPI Stack Overflow Inbound - MS08-067 (16) - Suricata Rule 2008706 (et/open)

ET NETBIOS Microsoft Windows NETAPI Stack Overflow Inbound - MS08-067 (16)

7.0.3 5.0SID: 2008706Rev: 6Enabled4 viewsHistory

Fileemerging-netbios.rules

CreatedJuly 30, 2010

UpdatedOctober 19, 2026

Classificationattempted-admin

alert tcp any any -> $HOME_NET 139 (msg:"ET NETBIOS Microsoft Windows NETAPI Stack Overflow Inbound - MS08-067 (16)"; flow:established,to_server; content:"|0B|"; offset:2; depth:1; dcerpc.iface:4b324fc8-1670-01d3-1278-5a47bf6ee188; reference:url,www.microsoft.com/technet/security/Bulletin/MS08-067.mspx; reference:cve,2008-4250; reference:url,www.kb.cert.org/vuls/id/827267; classtype:attempted-admin; sid:2008706; rev:6; metadata:created_at 2010_07_30, cve CVE_2008_4250, confidence Medium, signature_severity Major, updated_at 2026_10_19;)

References

url	www.microsoft.com/technet/security/Bulletin/MS08-067.mspx
cve	2008-4250
url	www.kb.cert.org/vuls/id/827267

Metadata

created at2010_07_30

cve

CVE-2008-4250

confidenceMedium

signature severityMajor

updated at2026_10_19

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!