""GPL VOIP EXPLOIT SIP UDP Softphone overflow attempt""
SID: 2100223
Revision: 2
Class Type: misc-attack
Metadata: created_at 2010_09_23, cve CVE_2006_0189, updated_at 2014_10_30
Reference:
-
cve
-
2006-0189
Protocol: udp
Source Network: $EXTERNAL_NET
Source Port: any
Destination Network: $HOME_NET
Destination Port: 5060
Flow:
Contents:
-
Value: "|3B|branch|3D|"
-
Value: "a|3D|"
Within:
PCRE: "/^a\x3D[^\n]{1000,}/smi"
Special Options: