""ET EXPLOIT Possible CVE-2014-6271 exploit attempt via malicious DHCP ACK""

SID: 2019237

Revision: 4

Class Type: attempted-admin

Metadata: created_at 2014_09_25, cve CVE_2014_6271, updated_at 2014_10_01

Reference:

  • cve

  • 2014-6271

Protocol: udp

Source Network: any

Source Port: 67

Destination Network: any

Destination Port: 68

Flow:

Contents:

  • Value: "|02 01|" Depth: 2

  • Value: "|28 29 20 7b|"

Within:

PCRE:

Special Options:

source