ET NETBIOS Microsoft Windows NETAPI Stack Overflow Inbound - MS08-067 (24) - Suricata Rule 2008714 (et/open)

ET NETBIOS Microsoft Windows NETAPI Stack Overflow Inbound - MS08-067 (24)

SID: 2008714Rev: 50 viewsHistory

Sourceet/open

CreatedJuly 30, 2010

UpdatedJuly 26, 2019

Classificationattempted-admin

alert tcp any any -> $HOME_NET 445 (msg:"ET NETBIOS Microsoft Windows NETAPI Stack Overflow Inbound - MS08-067 (24)"; flow:established,to_server; content:"|20 00|"; content:"|C8 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 88|"; content:"|00 2E 00 2E 00 2F 00 2E 00 2E 00 2F|"; reference:url,www.microsoft.com/technet/security/Bulletin/MS08-067.mspx; reference:cve,2008-4250; reference:url,www.kb.cert.org/vuls/id/827267; classtype:attempted-admin; sid:2008714; rev:5; metadata:created_at 2010_07_30, cve CVE_2008_4250, confidence Medium, signature_severity Major, updated_at 2019_07_26;)

References

url	www.microsoft.com/technet/security/Bulletin/MS08-067.mspx
cve	2008-4250
url	www.kb.cert.org/vuls/id/827267

Metadata

created at2010_07_30

cveCVE-2008-4250

confidenceMedium

signature severityMajor

updated at2019_07_26

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!