Rule History

alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"ET DELETED Possible JAVA pack200-zip-exploit attempt"; flow:to_client; content:"e.pack.gz"; content:"|0d 0a|Content-Encoding|3a| pack200-gzip"; within:55; reference:url,isc.sans.org/diary.html?storyid=6805&rss; classtype:attempted-user; sid:2009665; rev:6; metadata:created_at 2010_07_30, signature_severity Unknown, updated_at 2019_07_26;)