ET DELETED Possible JAVA pack200-zip-exploit attempt

SID: 2009665Rev: 60 views
History
Sourceet/open
CreatedJuly 30, 2010
UpdatedJuly 26, 2019
Classificationattempted-user
alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"ET DELETED Possible JAVA pack200-zip-exploit attempt"; flow:to_client; content:"e.pack.gz"; content:"|0d 0a|Content-Encoding|3a| pack200-gzip"; within:55; reference:url,isc.sans.org/diary.html?storyid=6805&rss; classtype:attempted-user; sid:2009665; rev:6; metadata:created_at 2010_07_30, signature_severity Unknown, updated_at 2019_07_26;)

References

urlisc.sans.org/diary.html?storyid=6805&rss

Metadata

created at2010_07_30
signature severityUnknown
updated at2019_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!