GPL NETBIOS SMB Session Setup AndX request unicode username overflow attempt

SID: 2102403Rev: 70 views
History
Sourceet/open
CreatedSeptember 23, 2010
UpdatedJuly 26, 2019
Classificationprotocol-command-decode
alert tcp $EXTERNAL_NET any -> $HOME_NET 139 (msg:"GPL NETBIOS SMB Session Setup AndX request unicode username overflow attempt"; flow:stateless; content:"|00|"; depth:1; content:"|FF|SMBs"; within:5; distance:3; byte_test:1,&,128,6,relative; pcre:"/^.{27}/sR"; byte_test:4,!&,2147483648,21,relative,little; content:!"|00 00|"; within:510; distance:29; reference:bugtraq,9752; reference:url,www.eeye.com/html/Research/Advisories/AD20040226.html; classtype:protocol-command-decode; sid:2102403; rev:7; metadata:created_at 2010_09_23, confidence Medium, signature_severity Informational, updated_at 2019_07_26;)

References

bugtraq9752
urlwww.eeye.com/html/Research/Advisories/AD20040226.html

Metadata

created at2010_09_23
confidenceMedium
signature severityInformational
updated at2019_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!