""GPL RPC tooltalk UDP overflow attempt""

SID: 2101964

Revision: 9

Class Type: misc-attack

Metadata: created_at 2010_09_23, cve CVE_1999_0003, updated_at 2011_04_22

Reference:

  • cve

  • 1999-0003

Protocol: udp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $HOME_NET

Destination Port: any

Flow:

Contents:

  • Value: "|00 01 86 F3|" Depth: 4 Offset: 12

  • Value: "|00 00 00 07|"

  • Value: "|00 00 00 00|" Depth: 4 Offset: 4

Within: 4

PCRE:

Special Options:

source