ET EXPLOIT MySQL Heap based buffer overrun Exploit Specific
Sourceet/open
Fileemerging-exploit.rules
CreatedDecember 5, 2012
UpdatedMarch 6, 2024
Classificationattempted-user
alert tcp $EXTERNAL_NET any -> $SQL_SERVERS 3306 (msg:"ET EXPLOIT MySQL Heap based buffer overrun Exploit Specific"; flow:established,to_server ; byte_test:3,>,10000,0,little ; content:"|00 03|"; offset:3; depth:2; pcre:"/^(USE|PASS|SELECT|UPDATE|INSERT|ASCII|SHOW|CREATE|DESCRIBE|DROP|ALTER)\s+?(.{1})\2{300}/Ri"; reference:url,archives.neohapsis.com/archives/fulldisclosure/2012-12/0006.html ; classtype:attempted-user; sid:2015987; rev:4; metadata:created_at 2012_12_05, signature_severity Major, updated_at 2024_03_06;)
Metadata
created at2012_12_05
signature severityMajor
updated at2024_03_06
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!