misc.rules

来自「This is the snapshot of Snot Latest Rule」· RULES 代码 · 共 4 行

# Autogenerated skeleton rules file.  Do NOT edit by hand
alert tcp $EXTERNAL_NET any -> $HOME_NET 443 (msg:"MISC Mozilla Network Security Services SSLv2 stack overflow attempt"; sid:11672; gid:3; rev:2; classtype:attempted-admin; reference:cve,2007-0009; reference:bugtraq,22694; reference:url,labs.idefense.com/intelligence/vulnerabilities/display.php?id=482; metadata: engine shared, soid 3|11672;)
alert tcp $EXTERNAL_NET any -> $HOME_NET 3306 (msg:"MISC MySQL COM_TABLE_DUMP Function Stack Overflow attempt"; sid:11619; gid:3; rev:2; classtype:attempted-admin; reference:cve,2006-1518; reference:bugtraq,17780; reference:url,www.wisec.it/vulns.php?page=8; metadata: engine shared, soid 3|11619;)