Back to Rule

Rule History

SID: 2014925 • Source: et/open

Versions (2)

Version DetailsCurrent

Rev: 3Jun 20, 2012, 12:00 PM

ET DELETED NetSSH SSH Version String Hardcoded in Metasploit

alert tcp $EXTERNAL_NET any -> $HOME_NET $SSH_PORTS (msg:"ET DELETED NetSSH SSH Version String Hardcoded in Metasploit"; flow:established,to_server; content:"SSH-2.0-OpenSSH_5.0|0d 0a|"; depth:21; reference:url,github.com/rapid7/metasploit-framework/blob/master/lib/net/ssh/transport/server_version.rb; classtype:attempted-user; sid:2014925; rev:3; metadata:affected_product Any, attack_target Client_and_Server, created_at 2012_06_20, deployment Perimeter, deployment Internet, deployment Internal, deployment Datacenter, deprecation_reason Age, signature_severity Critical, tag Metasploit, updated_at 2023_04_24;)

Jun 20, 2012, 12:00 PM

Apr 24, 2023, 12:00 PM

Jun 20, 2012, 12:00 PM

May 31, 2024, 9:00 PM

rules/emerging-deleted.rules