""GPL SQL sa brute force failed login unicode attempt""

SID: 2103273

Revision: 4

Class Type: unsuccessful-user

Metadata: created_at 2010_09_23, cve CVE_2000_1209, updated_at 2012_09_12

Reference:

  • nessus

  • 10673

Protocol: tcp

Source Network: $SQL_SERVERS

Source Port: 1433

Destination Network: $EXTERNAL_NET

Destination Port: any

Flow: from_server,established

Contents:

  • Value: "L|00|o|00|g|00|i|00|n|00| |00|f|00|a|00|i|00|l|00|e|00|d|00| |00|f|00|o|00|r|00| |00|u|00|s|00|e|00|r|00| |00|'|00|s|00|a|00|'|00|"

Within:

PCRE:

Special Options:

source