ATTACK [PTsecurity] CoronaBlue/SMBGhost DOS/RCE Attempt (CVE-2020-0796)

SID: 10005777Rev: 21 views

Sourceptresearch/attackdetection

CreatedDecember 13, 2021

UpdatedDecember 13, 2021

Classificationattempted-admin

alert tcp any any -> any any (msg:"ATTACK [PTsecurity] CoronaBlue/SMBGhost DOS/RCE Attempt (CVE-2020-0796)"; flow:established; content:"|FC|SMB"; depth:8; byte_test:4, >, 0x800134, 8, relative, little; reference:url, www.mcafee.com/blogs/other-blogs/mcafee-labs/smbghost-analysis-of-cve-2020-0796; reference:cve, 2020-0796; reference:url, github.com/ptresearch/AttackDetection; classtype:attempted-admin; sid:10005777; rev:2;)

References

url	www.mcafee.com/blogs/other-blogs/mcafee-labs/smbghost-analysis-of-cve-2020-0796
cve	2020-0796
url	github.com/ptresearch/AttackDetection

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!