""ET EXPLOIT Possible CVE-2014-6271 Attempt Against SIP Proxy""

SID: 2019289

Revision: 3

Class Type: attempted-admin

Metadata: created_at 2014_09_27, cve CVE_2014_6271, updated_at 2023_05_24

Reference:

  • cve

  • 2014-6271

Protocol: udp

Source Network: any

Source Port: any

Destination Network: $HOME_NET

Destination Port: [5060,5061]

Flow: to_server

Contents:

  • Value: "|28 29 20 7b|"

Within:

PCRE:

Special Options:

source