Rule History

SID: 2008517 • Source: et/open

Versions (3)

Version DetailsCurrent

Rev: 2 • Jul 30, 2010, 12:00 PM

Message:

ET EXPLOIT SQL sp_configure - configuration change

Rule:

alert tcp $EXTERNAL_NET any -> $SQL_SERVERS 1433 (msg:"ET EXPLOIT SQL sp_configure - configuration change"; flow:to_server,established; content:"s|00|p|00|_|00|c|00|o|00|n|00|f|00|i|00|g|00|u|00|r|00|e|00|"; nocase; reference:url,msdn.microsoft.com/en-us/library/ms190693.aspx; classtype:attempted-user; sid:2008517; rev:2; metadata:created_at 2010_07_30, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2019_07_26;)

Created:

Jul 30, 2010, 12:00 PM

Updated:

Jul 26, 2019, 12:00 PM

DB Created:

Sep 21, 2024, 3:00 AM

DB Updated:

Nov 18, 2025, 10:34 PM

Filename:

rules/emerging-exploit.rules