GPL DELETED MS Remote Desktop non-encrypted session initiation attempt

7.0.35.0SID: 2102418Rev: 6Disabled2 views
Sourceet/open
Fileemerging-deleted.rules
CreatedSeptember 23, 2010
UpdatedMarch 8, 2024
Classificationattempted-dos
alert tcp $EXTERNAL_NET any -> $HOME_NET 3389 (msg:"GPL DELETED MS Remote Desktop non-encrypted session initiation attempt"; flow:established,to_server; content:"|03 00 01|"; depth:3; content:"|00|"; depth:1; offset:288; reference:url,www.microsoft.com/technet/security/bulletin/MS01-052.mspx; classtype:attempted-dos; sid:2102418; rev:6; metadata:created_at 2010_09_23, signature_severity Unknown, updated_at 2024_03_08;)

References

urlwww.microsoft.com/technet/security/bulletin/MS01-052.mspx

Metadata

created at2010_09_23
signature severityUnknown
updated at2024_03_08

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!