""GPL EXPLOIT sp_start_job - program execution""

SID: 2100676

Revision: 7

Class Type: attempted-user

Metadata: created_at 2010_09_23, updated_at 2012_07_27

Reference:

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $SQL_SERVERS

Destination Port: 139

Flow: to_server,established

Contents:

  • Value: "s|00|p|00||00|s|00|t|00|a|00|r|00|t|00||00|j|00|o|00|b|00|" Depth: 32 Offset: 32

Within:

PCRE:

Special Options:

  • nocase

source