""GPL SQL sa login failed""

SID: 2100688

Revision: 11

Class Type: unsuccessful-user

Metadata: created_at 2010_09_23, cve CVE_2000_1209, updated_at 2012_09_12

Reference:

  • nessus

  • 10673

Protocol: tcp

Source Network: $SQL_SERVERS

Source Port: 1433

Destination Network: $EXTERNAL_NET

Destination Port: any

Flow: from_server,established

Contents:

  • Value: "Login failed for user 'sa'"

Within:

PCRE:

Special Options:

source