""ET EXPLOIT SQL sp_configure - configuration change""

SID: 2008517

Revision: 3

Class Type: attempted-user

Metadata: created_at 2010_07_30, updated_at 2010_11_04

Reference:

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $SQL_SERVERS

Destination Port: 1433

Flow: to_server,established

Contents:

  • Value: "s|00|p|00|_|00|c|00|o|00|n|00|f|00|i|00|g|00|u|00|r|00|e|00|"

Within:

PCRE:

Special Options:

  • nocase

source