""GPL NETBIOS xp_reg* registry access""

SID: 2100689

Revision: 12

Class Type: attempted-user

Metadata: created_at 2010_09_23, cve CVE_2002_0642, updated_at 2012_09_12

Reference:

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $SQL_SERVERS

Destination Port: 139

Flow: to_server,established

Contents:

  • Value: "x|00|p|00|_|00|r|00|e|00|g|00|" Depth: 32 Offset: 32

Within:

PCRE:

Special Options:

  • nocase

source