Rule History

alert tcp $EXTERNAL_NET any -> $SQL_SERVERS 1433 (msg:"ET DELETED MSSQL sp_replwritetovarbin - potential memory overwrite case 2"; flow:to_server,established; content:"sp_replwritetovarbin"; nocase; reference:url,archives.neohapsis.com/archives/fulldisclosure/2008-12/0239.html; classtype:attempted-user; sid:2008910; rev:2; metadata:created_at 2010_07_30, signature_severity Unknown, updated_at 2019_07_26;)