GPL EXPLOIT ISAKMP forth payload certificate request length overflow attempt
Sourceet/open
Fileemerging-exploit.rules
CreatedSeptember 23, 2010
UpdatedJuly 26, 2019
Classificationattempted-admin
alert udp $EXTERNAL_NET any -> $HOME_NET 500 (msg:"GPL EXPLOIT ISAKMP forth payload certificate request length overflow attempt"; flow:to_server; byte_test:4,>,2043,24 ; byte_jump:2,30 ; content:"|07|"; within:1; distance:-4; byte_jump:2,1,relative ; byte_test:2,>,2043,-2,relative ; reference:bugtraq,9582 ; reference:cve,2004-0040 ; classtype:attempted-admin; sid:2102379; rev:7; metadata:created_at 2010_09_23, confidence Medium, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2019_07_26;)
Metadata
created at2010_09_23
confidenceMedium
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2019_07_26
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!