GPL DELETED Content-Disposition CLSID command attempt
Sourceet/open
Fileemerging-deleted.rules
CreatedSeptember 23, 2010
UpdatedMarch 8, 2024
Classificationattempted-user
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"GPL DELETED Content-Disposition CLSID command attempt"; flow:established,to_client ; content:"Content-Disposition|3A|"; nocase; pcre:"/^Content-Disposition\x3a[^\r\n]*\{[\da-fA-F]{8}(-[\da-fA-F]{4}){3}-[\da-fA-F]{12}\}/smi"; reference:bugtraq,9510 ; reference:cve,2004-0420 ; reference:url,www.microsoft.com/technet/security/bulletin/ms04-024.mspx ; classtype:attempted-user; sid:2102589; rev:8; metadata:created_at 2010_09_23, signature_severity Unknown, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_08;)
References
Metadata
created at2010_09_23
signature severityUnknown
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_03_08
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!