GPL NETBIOS DCERPC ISystemActivator path overflow attempt big endian

7.0.35.0SID: 2103198Rev: 5Disabled3 views
Sourceet/open
Fileemerging-netbios.rules
CreatedSeptember 23, 2010
UpdatedMarch 14, 2024
Classificationattempted-admin
alert tcp $EXTERNAL_NET any -> $HOME_NET 135 (msg:"GPL NETBIOS DCERPC ISystemActivator path overflow attempt big endian"; flow:established,to_server; flowbits:isset,dce.isystemactivator.bind; content:"|05|"; byte_test:1,<,16,3,relative; content:"|5C 00 5C 00|"; byte_test:4,>,256,-8,relative; reference:bugtraq,8205; reference:cve,2003-0352; reference:nessus,11808; reference:url,www.microsoft.com/technet/security/bulletin/MS03-026.mspx; classtype:attempted-admin; sid:2103198; rev:5; metadata:created_at 2010_09_23, confidence Medium, signature_severity Informational, updated_at 2024_03_14;)

References

bugtraq8205
cve2003-0352
nessus11808
urlwww.microsoft.com/technet/security/bulletin/MS03-026.mspx

Metadata

created at2010_09_23
confidenceMedium
signature severityInformational
updated at2024_03_14

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!