ET EXPLOIT MS Exchange Link State Routing Chunk (maybe MS05-021)

SID: 2001873Rev: 90 views
History
Sourceet/open
CreatedJuly 30, 2010
UpdatedJuly 26, 2019
Classificationmisc-activity
alert tcp $EXTERNAL_NET any -> $SMTP_SERVERS 25 (msg:"ET EXPLOIT MS Exchange Link State Routing Chunk (maybe MS05-021)"; flow:to_server, established; content:"X-LINK2STATE"; nocase; content:"CHUNK="; nocase; threshold:type limit, track by_src, count 1, seconds 60; flowbits:set,msxlsa; reference:cve,CAN-2005-0560; reference:url,isc.sans.org/diary.php?date=2005-04-12; reference:url,www.microsoft.com/technet/security/bulletin/MS05-021.mspx; classtype:misc-activity; sid:2001873; rev:9; metadata:created_at 2010_07_30, confidence Medium, signature_severity Major, updated_at 2019_07_26;)

References

cveCAN-2005-0560
urlisc.sans.org/diary.php?date=2005-04-12
urlwww.microsoft.com/technet/security/bulletin/MS05-021.mspx

Metadata

created at2010_07_30
confidenceMedium
signature severityMajor
updated at2019_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!