""GPL MISC CVS invalid user authentication response""

SID: 2102008

Revision: 5

Class Type: misc-attack

Metadata: created_at 2010_09_23, updated_at 2011_04_21

Reference:

Protocol: tcp

Source Network: $HOME_NET

Source Port: 2401

Destination Network: $EXTERNAL_NET

Destination Port: any

Flow: from_server,established

Contents:

  • Value: "E Fatal error, aborting."

  • Value: "|3A| no such user"

Within:

PCRE:

Special Options:

source