Back to Rule

Rule History

SID: 2102578 • Source: et/open

Versions (3)

Version DetailsCurrent

Rev: 4Sep 23, 2010, 12:00 PM

GPL RPC kerberos principal name overflow UDP

alert udp $EXTERNAL_NET any -> $HOME_NET 88 (msg:"GPL RPC kerberos principal name overflow UDP"; content:"j"; depth:1; content:"|01 A1|"; asn1:oversize_length 1024,relative_offset -1; reference:url,web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-005-buf.txt; classtype:attempted-admin; sid:2102578; rev:4; metadata:created_at 2010_09_23, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2019_07_26;)

Sep 23, 2010, 12:00 PM

Jul 26, 2019, 12:00 PM

Sep 21, 2024, 3:00 AM

Nov 10, 2025, 10:34 PM

rules/emerging-rpc.rules