""ET EXPLOIT xp_enumdsn access""

SID: 2010003

Revision: 5

Class Type: attempted-user

Metadata: created_at 2010_07_30, updated_at 2018_01_09

Reference:

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $SQL_SERVERS

Destination Port: 1433

Flow: to_server,established

Contents:

  • Value: "x|00|p|00|_|00|e|00|n|00|u|00|m|00|d|00|s|00|n|00|"

Within:

PCRE:

Special Options:

  • nocase

source