""GPL NETBIOS SMB-DS DCERPC NTLMSSP invalid mechlistMIC attempt""
SID: 2102385
Revision: 12
Class Type: attempted-dos
Metadata: created_at 2010_09_23, cve CVE_2003_0818, updated_at 2012_09_12
Reference:
-
nessus
-
12065
Protocol: tcp
Source Network: $EXTERNAL_NET
Source Port: any
Destination Network: $HOME_NET
Destination Port: 445
Flow: to_server,established
Contents:
-
Value: "|FF|SMBs" Depth: 5 Offset: 4
-
Value: "`" Depth: 1 Offset: 63
-
Value: "|00 00 00|b|06 83 00 00 06|+|06 01 05 05 02|"
-
Value: "|06 0A|+|06 01 04 01 82|7|02 02 0A|"
-
Value: "|A3|>0<|A0|0"
Within: 15
PCRE:
Special Options:
- nocase