""ET EXPLOIT Possible OpenSSL HeartBleed Large HeartBeat Response from Common SSL Port (Outbound from Server)""

SID: 2018382

Revision: 9

Class Type: bad-unknown

Metadata: created_at 2014_04_11, cve CVE_2014_0160, updated_at 2019_08_16

Reference:

Protocol: tcp

Source Network: $HOME_NET

Source Port: [21,25,110,143,443,465,587,636,989:995,5061,5222]

Destination Network: $EXTERNAL_NET

Destination Port: any

Flow: established,to_client

Contents:

  • Value: "|18 03|" Depth: 2

Within:

PCRE:

Special Options:

source