ET NETBIOS SMB Trans2 Query_Fs_Attribute_Info SrvSmbQueryFsInformation Pool Buffer Overflow

7.0.3 5.0SID: 2012094Rev: 4Enabled3 views

Fileemerging-netbios.rules

CreatedDecember 23, 2010

UpdatedMarch 6, 2024

Classificationattempted-user

alert tcp $EXTERNAL_NET any -> $HOME_NET 445 (msg:"ET NETBIOS SMB Trans2 Query_Fs_Attribute_Info SrvSmbQueryFsInformation Pool Buffer Overflow"; flow:established,to_server; content:"|ff 53 4d 42 32|"; offset:4; depth:5; content:"|00 00 00 00|"; within:4; content:"|00 00|"; distance:30; within:2; content:"|00 03 00|"; distance:19; within:3; reference:url,www.exploit-db.com/exploits/14607/; reference:url,seclists.org/fulldisclosure/2010/Aug/122; reference:cve,2010-2550; reference:bid,42224; reference:url,www.microsoft.com/technet/security/Bulletin/MS10-054.mspx; classtype:attempted-user; sid:2012094; rev:4; metadata:created_at 2010_12_23, cve CVE_2010_2550, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_06;)

References

url	www.exploit-db.com/exploits/14607/
url	seclists.org/fulldisclosure/2010/Aug/122
cve	2010-2550
bid	42224
url	www.microsoft.com/technet/security/Bulletin/MS10-054.mspx

Metadata

created at2010_12_23

cve

CVE-2010-2550

confidenceHigh

signature severityMajor

tagDescription_Generated_By_Proofpoint_Nexus

updated at2024_03_06

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!