ET DOS Microsoft Remote Desktop (RDP) Syn/Ack Outbound Flowbit Set

7.0.3 5.0SID: 2014385Rev: 6Enabled1 views

Fileemerging-dos.rules

CreatedMarch 15, 2012

UpdatedMarch 14, 2024

Classificationnot-suspicious

alert tcp $HOME_NET 3389 -> any any (msg:"ET DOS Microsoft Remote Desktop (RDP) Syn/Ack Outbound Flowbit Set"; flow:from_server; flowbits:isnotset,ms.rdp.synack; flowbits:set,ms.rdp.synack; flowbits:noalert; flags:SA; reference:cve,2012-0152; classtype:not-suspicious; sid:2014385; rev:6; metadata:created_at 2012_03_15, cve CVE_2012_0152, signature_severity Major, updated_at 2024_03_14;)

References

cve

2012-0152

Metadata

created at2012_03_15

cve

CVE-2012-0152

signature severityMajor

updated at2024_03_14

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!