ET DELETED Possible CVE-2014-6271 exploit attempt via malicious DHCP ACK - option 67 - Suricata Rule 2019238 (et/open)

ET DELETED Possible CVE-2014-6271 exploit attempt via malicious DHCP ACK - option 67

SID: 2019238Rev: 20 viewsHistory

Sourceet/open

CreatedSeptember 25, 2014

UpdatedJuly 26, 2019

Classificationattempted-admin

alert udp any 67 -> any 68 (msg:"ET DELETED Possible CVE-2014-6271 exploit attempt via malicious DHCP ACK - option 67"; content:"|02 01|"; depth:2; content:"|43|"; distance:238; content:"|28 29 20 7b 20|"; distance:1; within:10; reference:url,access.redhat.com/articles/1200223; reference:cve,2014-6271; classtype:attempted-admin; sid:2019238; rev:2; metadata:created_at 2014_09_25, signature_severity Unknown, tag CISA_KEV, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2019_07_26;)

References

url	access.redhat.com/articles/1200223
cve	2014-6271

Metadata

created at2014_09_25

signature severityUnknown

tagDescription_Generated_By_Proofpoint_Nexus

updated at2019_07_26

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!