""ET EXPLOIT Possible OpenSSL HeartBleed Large HeartBeat Response from Common SSL Port (Outbound from Client)""

SID: 2018383

Revision: 9

Class Type: bad-unknown

Metadata: created_at 2014_04_11, cve CVE_2014_0160, updated_at 2019_08_16

Reference:

• Link

Protocol: tcp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: [21,25,110,143,443,465,587,636,989:995,5061,5222]

Flow: established,from_client

Contents:

• Value: "|18 03|" Depth: 2

Within:

PCRE:

Special Options:

source