""ET NETBIOS SMB Trans2 Query_Fs_Attribute_Info SrvSmbQueryFsInformation Pool Buffer Overflow""

SID: 2012094

Revision: 2

Class Type: attempted-user

Metadata: created_at 2010_12_23, cve CVE_2010_2550, confidence High, updated_at 2010_12_23

Reference:

• Link

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $HOME_NET

Destination Port: 445

Flow: to_server,established

Contents:

• Value: "|ff 53 4d 42 32|" Depth: 5 Offset: 4

• Value: "|00 00 00 00|"

• Value: "|00 00|"

• Value: "|00 03 00|"

Within: 3

PCRE:

Special Options:

source