""GPL TFTP MISC TFTP32 Get Format string attempt""

SID: 2101222

Revision: 3

Class Type: attempted-admin

Metadata: created_at 2010_09_23, updated_at 2014_10_30

Reference:

Protocol: udp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $HOME_NET

Destination Port: 69

Flow:

Contents:

  • Value: "|00 01 25 2E|" Depth: 4

Within:

PCRE:

Special Options:

source