Back to Rule

Rule History

SID: 2102486 • Source: et/open

Versions (3)

Version DetailsCurrent

Rev: 6Sep 23, 2010, 12:00 PM

GPL EXPLOIT ISAKMP invalid identification payload attempt

alert udp $EXTERNAL_NET any -> $HOME_NET 500 (msg:"GPL EXPLOIT ISAKMP invalid identification payload attempt"; content:"|05|"; depth:1; offset:16; byte_test:2,>,4,30; byte_test:2,<,8,30; reference:bugtraq,10004; reference:cve,2004-0184; classtype:attempted-dos; sid:2102486; rev:6; metadata:created_at 2010_09_23, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2019_07_26;)

Sep 23, 2010, 12:00 PM

Jul 26, 2019, 12:00 PM

Sep 21, 2024, 3:00 AM

Oct 9, 2025, 9:35 PM

rules/emerging-exploit.rules