Sourcefire VRT Certified Rules Update
Date: 2005-05-31
This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack.
The format of the file is:
sid - Message (rule group)
New rules: 3639 - NETBIOS SMB Trans andx data displacement null pointer DOS attempt (netbios.rules) 3640 - NETBIOS SMB Trans data displacement null pointer DOS attempt (netbios.rules) 3641 - NETBIOS SMB Trans unicode data displacement null pointer DOS attempt (netbios.rules) 3642 - NETBIOS SMB Trans unicode andx data displacement null pointer DOS attempt (netbios.rules) 3643 - NETBIOS SMB-DS Trans andx data displacement null pointer DOS attempt (netbios.rules) 3644 - NETBIOS SMB-DS Trans data displacement null pointer DOS attempt (netbios.rules) 3645 - NETBIOS SMB-DS Trans unicode data displacement null pointer DOS attempt (netbios.rules) 3646 - NETBIOS SMB-DS Trans unicode andx data displacement null pointer DOS attempt (netbios.rules) 3647 - NETBIOS-DG SMB Trans andx data displacement null pointer DOS attempt (netbios.rules) 3648 - NETBIOS-DG SMB Trans data displacement null pointer DOS attempt (netbios.rules) 3649 - NETBIOS-DG SMB Trans unicode data displacement null pointer DOS attempt (netbios.rules) 3650 - NETBIOS-DG SMB Trans unicode andx data displacement null pointer DOS attempt (netbios.rules) 3665 - MYSQL server greeting (mysql.rules) 3666 - MYSQL server greeting finished (mysql.rules) 3667 - MYSQL protocol 41 client authentication bypass attempt (mysql.rules) 3668 - MYSQL client authentication bypass attempt (mysql.rules) 3669 - MYSQL protocol 41 secure client overflow attempt (mysql.rules) 3670 - MYSQL secure client overflow attempt (mysql.rules) 3671 - MYSQL protocol 41 client overflow attempt (mysql.rules) 3672 - MYSQL client overflow attempt (mysql.rules) 3673 - MISC Microsoft SMS remote control client DoS overly long length attempt (misc.rules) 3674 - WEB-CGI db4web_c directory traversal attempt (web-cgi.rules) 3675 - MISC IBM DB2 DTS empty format string dos attempt (misc.rules) 3676 - WEB-MISC newsscript.pl admin attempt (web-misc.rules) 3677 - EXPLOIT SIP UDP CSeq overflow attempt (exploit.rules) 3678 - EXPLOIT SIP TCP CSeq overflow attempt (exploit.rules) 3679 - WEB-CLIENT Firefox IFRAME src javascript code execution (web-client.rules) Updated rules: 115 - BACKDOOR NetBus Pro 2.0 connection established (backdoor.rules) 532 - NETBIOS SMB ADMIN$ share access (netbios.rules) 533 - NETBIOS SMB C$ share access (netbios.rules) 536 - NETBIOS SMB D$ share access (netbios.rules) 537 - NETBIOS SMB IPC$ share access (netbios.rules) 538 - NETBIOS SMB IPC$ unicode share access (netbios.rules) 837 - WEB-CGI uploader.exe access (web-cgi.rules) 1455 - WEB-CGI calender.pl access (web-cgi.rules) 1550 - SMTP ETRN overflow attempt (smtp.rules) 1631 - CHAT AIM login (chat.rules) 1772 - WEB-IIS pbserver access (web-iis.rules) 1826 - WEB-MISC WEB-INF access (web-misc.rules) 1844 - IMAP authenticate overflow attempt (imap.rules) 1909 - RPC CMSD TCP CMSD_INSERT buffer overflow attempt (rpc.rules) 1919 - FTP CWD overflow attempt (ftp.rules) 1931 - WEB-CGI rpc-nlog.pl access (web-cgi.rules) 2031 - RPC yppasswd user update UDP (rpc.rules) 2050 - MS-SQL version overflow attempt (sql.rules) 2174 - NETBIOS SMB winreg create tree attempt (netbios.rules) 2175 - NETBIOS SMB winreg unicode create tree attempt (netbios.rules) 2344 - FTP XCWD overflow attempt (ftp.rules) 2382 - NETBIOS SMB Session Setup NTMLSSP asn1 overflow attempt (netbios.rules) 2383 - NETBIOS SMB-DS Session Setup NTMLSSP asn1 overflow attempt (netbios.rules) 2446 - EXPLOIT ICQ SRV_MULTI/SRV_META_USER overflow attempt (exploit.rules) 2465 - NETBIOS SMB-DS IPC$ share access (netbios.rules) 2466 - NETBIOS SMB-DS IPC$ unicode share access (netbios.rules) 2467 - NETBIOS SMB D$ unicode share access (netbios.rules) 2468 - NETBIOS SMB-DS D$ share access (netbios.rules) 2469 - NETBIOS SMB-DS D$ unicode share access (netbios.rules) 2470 - NETBIOS SMB C$ unicode share access (netbios.rules) 2471 - NETBIOS SMB-DS C$ share access (netbios.rules) 2472 - NETBIOS SMB-DS C$ unicode share access (netbios.rules) 2473 - NETBIOS SMB ADMIN$ unicode share access (netbios.rules) 2474 - NETBIOS SMB-DS ADMIN$ share access (netbios.rules) 2475 - NETBIOS SMB-DS ADMIN$ unicode share access (netbios.rules) 2476 - NETBIOS SMB-DS winreg create tree attempt (netbios.rules) 2477 - NETBIOS SMB-DS winreg unicode create tree attempt (netbios.rules) 2478 - NETBIOS SMB-DS winreg bind attempt (netbios.rules) 2479 - NETBIOS SMB-DS winreg unicode bind attempt (netbios.rules) 2480 - NETBIOS SMB-DS InitiateSystemShutdown unicode attempt (netbios.rules) 2481 - NETBIOS SMB-DS InitiateSystemShutdown unicode little endian attempt (netbios.rules) 2482 - NETBIOS SMB-DS InitiateSystemShutdown attempt (netbios.rules) 2483 - NETBIOS SMB-DS InitiateSystemShutdown little endian attempt (netbios.rules) 2590 - SMTP MAIL FROM overflow attempt (smtp.rules) 2923 - NETBIOS SMB repeated logon failure (netbios.rules) 2924 - NETBIOS SMB-DS repeated logon failure (netbios.rules) 2925 - INFO web bug 0x0 gif attempt (info.rules) 2928 - NETBIOS SMB nddeapi create tree attempt (netbios.rules) 2929 - NETBIOS SMB nddeapi unicode create tree attempt (netbios.rules) 2930 - NETBIOS SMB-DS nddeapi create tree attempt (netbios.rules) 2931 - NETBIOS SMB-DS nddeapi unicode create tree attempt (netbios.rules) 2932 - NETBIOS SMB nddeapi bind attempt (netbios.rules) 2933 - NETBIOS SMB nddeapi unicode bind attempt (netbios.rules) 2934 - NETBIOS SMB-DS nddeapi bind attempt (netbios.rules) 2935 - NETBIOS SMB-DS nddeapi unicode bind attempt (netbios.rules) 2936 - NETBIOS SMB NDdeSetTrustedShareW overflow attempt (netbios.rules) 2937 - NETBIOS SMB NDdeSetTrustedShareW unicode overflow attempt (netbios.rules) 2938 - NETBIOS SMB-DS NDdeSetTrustedShareW overflow attempt (netbios.rules) 2939 - NETBIOS SMB-DS NDdeSetTrustedShareW unicode overflow attempt (netbios.rules) 2940 - NETBIOS SMB winreg bind attempt (netbios.rules) 2941 - NETBIOS SMB winreg unicode bind attempt (netbios.rules) 2942 - NETBIOS SMB InitiateSystemShutdown attempt (netbios.rules) 2943 - NETBIOS SMB InitiateSystemShutdown little endian attempt (netbios.rules) 2944 - NETBIOS SMB InitiateSystemShutdown unicode attempt (netbios.rules) 2945 - NETBIOS SMB InitiateSystemShutdown unicode little endian attempt (netbios.rules) 2946 - NETBIOS SMB NDdeSetTrustedShareW little endian overflow attempt (netbios.rules) 2947 - NETBIOS SMB NDdeSetTrustedShareW unicode little endian overflow attempt (netbios.rules) 2948 - NETBIOS SMB-DS NDdeSetTrustedShareW little endian overflow attempt (netbios.rules) 2949 - NETBIOS SMB-DS NDdeSetTrustedShareW unicode little endian overflow attempt (netbios.rules) 2950 - NETBIOS SMB too many stacked requests (netbios.rules) 2951 - NETBIOS SMB-DS too many stacked requests (netbios.rules) 2952 - NETBIOS SMB IPC$ andx share access (netbios.rules) 2953 - NETBIOS SMB IPC$ unicode andx share access (netbios.rules) 2954 - NETBIOS SMB-DS IPC$ andx share access (netbios.rules) 2955 - NETBIOS SMB-DS IPC$ unicode andx share access (netbios.rules) 2956 - NETBIOS SMB nddeapi andx create tree attempt (netbios.rules) 2957 - NETBIOS SMB nddeapi unicode andx create tree attempt (netbios.rules) 2958 - NETBIOS SMB-DS nddeapi andx create tree attempt (netbios.rules) 2959 - NETBIOS SMB-DS nddeapi unicode andx create tree attempt (netbios.rules) 2960 - NETBIOS SMB nddeapi andx bind attempt (netbios.rules) 2961 - NETBIOS SMB nddeapi unicode andx bind attempt (netbios.rules) 2962 - NETBIOS SMB-DS nddeapi andx bind attempt (netbios.rules) 2963 - NETBIOS SMB-DS nddeapi unicode andx bind attempt (netbios.rules) 2964 - NETBIOS SMB NDdeSetTrustedShareW andx overflow attempt (netbios.rules) 2965 - NETBIOS SMB NDdeSetTrustedShareW little endian andx overflow attempt (netbios.rules) 2966 - NETBIOS SMB NDdeSetTrustedShareW unicode andx overflow attempt (netbios.rules) 2967 - NETBIOS SMB NDdeSetTrustedShareW unicode little endian andx overflow attempt (netbios.rules) 2968 - NETBIOS SMB-DS NDdeSetTrustedShareW andx overflow attempt (netbios.rules) 2969 - NETBIOS SMB-DS NDdeSetTrustedShareW little endian andx overflow attempt (netbios.rules) 2970 - NETBIOS SMB-DS NDdeSetTrustedShareW unicode andx overflow attempt (netbios.rules) 2971 - NETBIOS SMB-DS NDdeSetTrustedShareW unicode little endian andx overflow attempt (netbios.rules) 2972 - NETBIOS SMB D$ andx share access (netbios.rules) 2973 - NETBIOS SMB D$ unicode andx share access (netbios.rules) 2974 - NETBIOS SMB-DS D$ andx share access (netbios.rules) 2975 - NETBIOS SMB-DS D$ unicode andx share access (netbios.rules) 2976 - NETBIOS SMB C$ andx share access (netbios.rules) 2977 - NETBIOS SMB C$ unicode andx share access (netbios.rules) 2978 - NETBIOS SMB-DS C$ andx share access (netbios.rules) 2979 - NETBIOS SMB-DS C$ unicode andx share access (netbios.rules) 2980 - NETBIOS SMB ADMIN$ andx share access (netbios.rules) 2981 - NETBIOS SMB ADMIN$ unicode andx share access (netbios.rules) 2982 - NETBIOS SMB-DS ADMIN$ andx share access (netbios.rules) 2983 - NETBIOS SMB-DS ADMIN$ unicode andx share access (netbios.rules) 2984 - NETBIOS SMB winreg andx create tree attempt (netbios.rules) 2985 - NETBIOS SMB winreg unicode andx create tree attempt (netbios.rules) 2986 - NETBIOS SMB-DS winreg andx create tree attempt (netbios.rules) 2987 - NETBIOS SMB-DS winreg unicode andx create tree attempt (netbios.rules) 2988 - NETBIOS SMB winreg andx bind attempt (netbios.rules) 2989 - NETBIOS SMB winreg unicode andx bind attempt (netbios.rules) 2990 - NETBIOS SMB-DS winreg andx bind attempt (netbios.rules) 2991 - NETBIOS SMB-DS winreg unicode andx bind attempt (netbios.rules) 2992 - NETBIOS SMB InitiateSystemShutdown andx attempt (netbios.rules) 2993 - NETBIOS SMB InitiateSystemShutdown little endian andx attempt (netbios.rules) 2994 - NETBIOS SMB InitiateSystemShutdown unicode andx attempt (netbios.rules) 2995 - NETBIOS SMB InitiateSystemShutdown unicode little endian andx attempt (netbios.rules) 2996 - NETBIOS SMB-DS InitiateSystemShutdown andx attempt (netbios.rules) 2997 - NETBIOS SMB-DS InitiateSystemShutdown little endian andx attempt (netbios.rules) 2998 - NETBIOS SMB-DS InitiateSystemShutdown unicode andx attempt (netbios.rules) 2999 - NETBIOS SMB-DS InitiateSystemShutdown unicode little endian andx attempt (netbios.rules) 3000 - NETBIOS SMB Session Setup NTMLSSP unicode asn1 overflow attempt (netbios.rules) 3001 - NETBIOS SMB Session Setup NTMLSSP andx asn1 overflow attempt (netbios.rules) 3002 - NETBIOS SMB Session Setup NTMLSSP unicode andx asn1 overflow attempt (netbios.rules) 3003 - NETBIOS SMB-DS Session Setup NTMLSSP unicode asn1 overflow attempt (netbios.rules) 3004 - NETBIOS SMB-DS Session Setup NTMLSSP andx asn1 overflow attempt (netbios.rules) 3005 - NETBIOS SMB-DS Session Setup NTMLSSP unicode andx asn1 overflow attempt (netbios.rules) 3006 - EXPLOIT Volition Freespace 2 buffer overflow attempt (exploit.rules) 3009 - BACKDOOR NetBus Pro 2.0 connection request (backdoor.rules) 3014 - BACKDOOR Asylum 0.1 connection established (backdoor.rules) 3015 - BACKDOOR Insane Network 4.0 connection established (backdoor.rules) 3016 - BACKDOOR Insane Network 4.0 connection established port 63536 (backdoor.rules) 3017 - EXPLOIT WINS overflow attempt (exploit.rules) 3018 - NETBIOS SMB NT Trans NT CREATE oversized Security Descriptor attempt (netbios.rules) 3019 - NETBIOS SMB NT Trans NT CREATE andx oversized Security Descriptor attempt (netbios.rules) 3020 - NETBIOS SMB NT Trans NT CREATE unicode oversized Security Descriptor attempt (netbios.rules) 3021 - NETBIOS SMB NT Trans NT CREATE unicode andx oversized Security Descriptor attempt (netbios.rules) 3022 - NETBIOS SMB-DS NT Trans NT CREATE oversized Security Descriptor attempt (netbios.rules) 3023 - NETBIOS SMB-DS NT Trans NT CREATE andx oversized Security Descriptor attempt (netbios.rules) 3024 - NETBIOS SMB-DS NT Trans NT CREATE unicode oversized Security Descriptor attempt (netbios.rules) 3025 - NETBIOS SMB-DS NT Trans NT CREATE unicode andx oversized Security Descriptor attempt (netbios.rules) 3026 - NETBIOS SMB NT Trans NT CREATE SACL overflow attempt (netbios.rules) 3027 - NETBIOS SMB NT Trans NT CREATE andx SACL overflow attempt (netbios.rules) 3028 - NETBIOS SMB NT Trans NT CREATE unicode SACL overflow attempt (netbios.rules) 3029 - NETBIOS SMB NT Trans NT CREATE unicode andx SACL overflow attempt (netbios.rules) 3030 - NETBIOS SMB-DS NT Trans NT CREATE SACL overflow attempt (netbios.rules) 3031 - NETBIOS SMB-DS NT Trans NT CREATE andx SACL overflow attempt (netbios.rules) 3032 - NETBIOS SMB-DS NT Trans NT CREATE unicode SACL overflow attempt (netbios.rules) 3033 - NETBIOS SMB-DS NT Trans NT CREATE unicode andx SACL overflow attempt (netbios.rules) 3034 - NETBIOS SMB NT Trans NT CREATE DACL overflow attempt (netbios.rules) 3035 - NETBIOS SMB NT Trans NT CREATE andx DACL overflow attempt (netbios.rules) 3036 - NETBIOS SMB NT Trans NT CREATE unicode DACL overflow attempt (netbios.rules) 3037 - NETBIOS SMB NT Trans NT CREATE unicode andx DACL overflow attempt (netbios.rules) 3038 - NETBIOS SMB-DS NT Trans NT CREATE DACL overflow attempt (netbios.rules) 3039 - NETBIOS SMB-DS NT Trans NT CREATE andx DACL overflow attempt (netbios.rules) 3040 - NETBIOS SMB-DS NT Trans NT CREATE unicode DACL overflow attempt (netbios.rules) 3041 - NETBIOS SMB-DS NT Trans NT CREATE unicode andx DACL overflow attempt (netbios.rules) 3042 - NETBIOS SMB NT Trans NT CREATE invalid SACL ace size dos attempt (netbios.rules) 3043 - NETBIOS SMB NT Trans NT CREATE andx invalid SACL ace size dos attempt (netbios.rules) 3044 - NETBIOS SMB NT Trans NT CREATE unicode invalid SACL ace size dos attempt (netbios.rules) 3045 - NETBIOS SMB NT Trans NT CREATE unicode andx invalid SACL ace size dos attempt (netbios.rules) 3046 - NETBIOS SMB-DS NT Trans NT CREATE invalid SACL ace size dos attempt (netbios.rules) 3047 - NETBIOS SMB-DS NT Trans NT CREATE andx invalid SACL ace size dos attempt (netbios.rules) 3048 - NETBIOS SMB-DS NT Trans NT CREATE unicode invalid SACL ace size dos attempt (netbios.rules) 3049 - NETBIOS SMB-DS NT Trans NT CREATE unicode andx invalid SACL ace size dos attempt (netbios.rules) 3050 - NETBIOS SMB NT Trans NT CREATE invalid SACL ace size dos attempt (netbios.rules) 3051 - NETBIOS SMB NT Trans NT CREATE andx invalid SACL ace size dos attempt (netbios.rules) 3052 - NETBIOS SMB NT Trans NT CREATE unicode invalid SACL ace size dos attempt (netbios.rules) 3053 - NETBIOS SMB NT Trans NT CREATE unicode andx invalid SACL ace size dos attempt (netbios.rules) 3054 - NETBIOS SMB-DS NT Trans NT CREATE invalid SACL ace size dos attempt (netbios.rules) 3055 - NETBIOS SMB-DS NT Trans NT CREATE andx invalid SACL ace size dos attempt (netbios.rules) 3056 - NETBIOS SMB-DS NT Trans NT CREATE unicode invalid SACL ace size dos attempt (netbios.rules) 3057 - NETBIOS SMB-DS NT Trans NT CREATE unicode andx invalid SACL ace size dos attempt (netbios.rules) 3061 - MISC distccd command execution attempt (misc.rules) 3063 - BACKDOOR Vampire 1.2 connection request (backdoor.rules) 3064 - BACKDOOR Vampire 1.2 connection confirmation (backdoor.rules) 3079 - WEB-CLIENT Microsoft ANI file parsing overflow (web-client.rules) 3080 - MISC Unreal Tournament secure overflow attempt (misc.rules) 3084 - EXPLOIT Veritas backup overflow attempt (exploit.rules) 3085 - EXPLOIT AIM goaway message buffer overflow attempt (exploit.rules) 3087 - WEB-IIS w3who.dll buffer overflow attempt (web-iis.rules) 3089 - DOS squid WCCP I_SEE_YOU message overflow attempt (dos.rules) 3090 - NETBIOS SMB llsrpc create tree attempt (netbios.rules) 3091 - NETBIOS SMB llsrpc unicode create tree attempt (netbios.rules) 3092 - NETBIOS SMB llsrpc andx create tree attempt (netbios.rules) 3093 - NETBIOS SMB llsrpc unicode andx create tree attempt (netbios.rules) 3094 - NETBIOS SMB-DS llsrpc create tree attempt (netbios.rules) 3095 - NETBIOS SMB-DS llsrpc unicode create tree attempt (netbios.rules) 3096 - NETBIOS SMB-DS llsrpc andx create tree attempt (netbios.rules) 3097 - NETBIOS SMB-DS llsrpc unicode andx create tree attempt (netbios.rules) 3098 - NETBIOS SMB llsrpc bind attempt (netbios.rules) 3099 - NETBIOS SMB llsrpc little endian bind attempt (netbios.rules) 3100 - NETBIOS SMB llsrpc unicode bind attempt (netbios.rules) 3101 - NETBIOS SMB llsrpc unicode little endian bind attempt (netbios.rules) 3102 - NETBIOS SMB llsrpc andx bind attempt (netbios.rules) 3103 - NETBIOS SMB llsrpc little endian andx bind attempt (netbios.rules) 3104 - NETBIOS SMB llsrpc unicode andx bind attempt (netbios.rules) 3105 - NETBIOS SMB llsrpc unicode little endian andx bind attempt (netbios.rules) 3106 - NETBIOS SMB-DS llsrpc bind attempt (netbios.rules) 3107 - NETBIOS SMB-DS llsrpc little endian bind attempt (netbios.rules) 3108 - NETBIOS SMB-DS llsrpc unicode bind attempt (netbios.rules) 3109 - NETBIOS SMB-DS llsrpc unicode little endian bind attempt (netbios.rules) 3110 - NETBIOS SMB-DS llsrpc andx bind attempt (netbios.rules) 3111 - NETBIOS SMB-DS llsrpc little endian andx bind attempt (netbios.rules) 3112 - NETBIOS SMB-DS llsrpc unicode andx bind attempt (netbios.rules) 3113 - NETBIOS SMB-DS llsrpc unicode little endian andx bind attempt (netbios.rules) 3114 - NETBIOS SMB llsrconnect overflow attempt (netbios.rules) 3115 - NETBIOS SMB llsrconnect little endian overflow attempt (netbios.rules) 3116 - NETBIOS SMB llsrconnect unicode overflow attempt (netbios.rules) 3117 - NETBIOS SMB llsrconnect unicode little endian overflow attempt (netbios.rules) 3118 - NETBIOS SMB llsrconnect andx overflow attempt (netbios.rules) 3119 - NETBIOS SMB llsrconnect little endian andx overflow attempt (netbios.rules) 3120 - NETBIOS SMB llsrconnect unicode andx overflow attempt (netbios.rules) 3121 - NETBIOS SMB llsrconnect unicode little endian andx overflow attempt (netbios.rules) 3122 - NETBIOS SMB-DS llsrconnect overflow attempt (netbios.rules) 3123 - NETBIOS SMB-DS llsrconnect little endian overflow attempt (netbios.rules) 3124 - NETBIOS SMB-DS llsrconnect unicode overflow attempt (netbios.rules) 3125 - NETBIOS SMB-DS llsrconnect unicode little endian overflow attempt (netbios.rules) 3126 - NETBIOS SMB-DS llsrconnect andx overflow attempt (netbios.rules) 3127 - NETBIOS SMB-DS llsrconnect little endian andx overflow attempt (netbios.rules) 3128 - NETBIOS SMB-DS llsrconnect unicode andx overflow attempt (netbios.rules) 3129 - NETBIOS SMB-DS llsrconnect unicode little endian andx overflow attempt (netbios.rules) 3130 - EXPLOIT MSN Messenger png overflow (exploit.rules) 3132 - WEB-CLIENT PNG large image width download attempt (web-client.rules) 3133 - WEB-CLIENT PNG large image height download attempt (web-client.rules) 3134 - WEB-CLIENT PNG large colour depth download attempt (web-client.rules) 3135 - NETBIOS SMB Trans2 QUERY_FILE_INFO attempt (netbios.rules) 3136 - NETBIOS SMB Trans2 QUERY_FILE_INFO andx attempt (netbios.rules) 3137 - NETBIOS SMB-DS Trans2 QUERY_FILE_INFO attempt (netbios.rules) 3138 - NETBIOS SMB-DS Trans2 QUERY_FILE_INFO andx attempt (netbios.rules) 3139 - NETBIOS SMB Trans2 FIND_FIRST2 attempt (netbios.rules) 3140 - NETBIOS SMB Trans2 FIND_FIRST2 andx attempt (netbios.rules) 3141 - NETBIOS SMB-DS Trans2 FIND_FIRST2 attempt (netbios.rules) 3142 - NETBIOS SMB-DS Trans2 FIND_FIRST2 andx attempt (netbios.rules) 3143 - NETBIOS SMB Trans2 FIND_FIRST2 response overflow attempt (netbios.rules) 3144 - NETBIOS SMB Trans2 FIND_FIRST2 response andx overflow attempt (netbios.rules) 3145 - NETBIOS SMB-DS Trans2 FIND_FIRST2 response overflow attempt (netbios.rules) 3146 - NETBIOS SMB-DS Trans2 FIND_FIRST2 response andx overflow attempt (netbios.rules) 3147 - TELNET login buffer overflow attempt (telnet.rules) 3148 - WEB-CLIENT winhelp clsid attempt (web-client.rules) 3150 - WEB-IIS SQLXML content type overflow (web-iis.rules) 3151 - FINGER / execution attempt (finger.rules) 3152 - MS-SQL sa brute force failed login attempt (sql.rules) 3153 - DNS TCP inverse query overflow (dns.rules) 3154 - DNS UDP inverse query overflow (dns.rules) 3155 - BACKDOOR BackOrifice 2000 Inbound Traffic (backdoor.rules) 3156 - NETBIOS DCERPC msqueue bind attempt (netbios.rules) 3157 - NETBIOS DCERPC msqueue little endian bind attempt (netbios.rules) 3159 - NETBIOS DCERPC CoGetInstanceFromFile overflow attempt (netbios.rules) 3160 - NETBIOS SMB msqueue bind attempt (netbios.rules) 3161 - NETBIOS SMB msqueue little endian bind attempt (netbios.rules) 3162 - NETBIOS SMB msqueue unicode bind attempt (netbios.rules) 3163 - NETBIOS SMB msqueue unicode little endian bind attempt (netbios.rules) 3164 - NETBIOS SMB msqueue andx bind attempt (netbios.rules) 3165 - NETBIOS SMB msqueue little endian andx bind attempt (netbios.rules) 3166 - NETBIOS SMB msqueue unicode andx bind attempt (netbios.rules) 3167 - NETBIOS SMB msqueue unicode little endian andx bind attempt (netbios.rules) 3168 - NETBIOS SMB-DS msqueue bind attempt (netbios.rules) 3169 - NETBIOS SMB-DS msqueue little endian bind attempt (netbios.rules) 3170 - NETBIOS SMB-DS msqueue unicode bind attempt (netbios.rules) 3171 - NETBIOS SMB-DS msqueue unicode little endian bind attempt (netbios.rules) 3172 - NETBIOS SMB-DS msqueue andx bind attempt (netbios.rules) 3173 - NETBIOS SMB-DS msqueue little endian andx bind attempt (netbios.rules) 3174 - NETBIOS SMB-DS msqueue unicode andx bind attempt (netbios.rules) 3175 - NETBIOS SMB-DS msqueue unicode little endian andx bind attempt (netbios.rules) 3176 - NETBIOS SMB CoGetInstanceFromFile overflow attempt (netbios.rules) 3177 - NETBIOS SMB CoGetInstanceFromFile little endian overflow attempt (netbios.rules) 3178 - NETBIOS SMB CoGetInstanceFromFile unicode overflow attempt (netbios.rules) 3179 - NETBIOS SMB CoGetInstanceFromFile unicode little endian overflow attempt (netbios.rules) 3180 - NETBIOS SMB CoGetInstanceFromFile andx overflow attempt (netbios.rules) 3181 - NETBIOS SMB CoGetInstanceFromFile little endian andx overflow attempt (netbios.rules) 3182 - NETBIOS SMB CoGetInstanceFromFile unicode andx overflow attempt (netbios.rules) 3183 - NETBIOS SMB CoGetInstanceFromFile unicode little endian andx overflow attempt (netbios.rules) 3184 - NETBIOS SMB-DS CoGetInstanceFromFile overflow attempt (netbios.rules) 3185 - NETBIOS SMB-DS CoGetInstanceFromFile little endian overflow attempt (netbios.rules) 3186 - NETBIOS SMB-DS CoGetInstanceFromFile unicode overflow attempt (netbios.rules) 3187 - NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian overflow attempt (netbios.rules) 3188 - NETBIOS SMB-DS CoGetInstanceFromFile andx overflow attempt (netbios.rules) 3189 - NETBIOS SMB-DS CoGetInstanceFromFile little endian andx overflow attempt (netbios.rules) 3190 - NETBIOS SMB-DS CoGetInstanceFromFile unicode andx overflow attempt (netbios.rules) 3191 - NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian andx overflow attempt (netbios.rules) 3193 - WEB-IIS .cmd executable file parsing attack (web-iis.rules) 3194 - WEB-IIS .bat executable file parsing attack (web-iis.rules) 3195 - NETBIOS name query overflow attempt TCP (netbios.rules) 3196 - NETBIOS name query overflow attempt UDP (netbios.rules) 3197 - NETBIOS DCERPC ISystemActivator path overflow attempt little endian (netbios.rules) 3199 - EXPLOIT WINS name query overflow attempt TCP (exploit.rules) 3200 - EXPLOIT WINS name query overflow attempt UDP (exploit.rules) 3201 - WEB-IIS httpodbc.dll access - nimda (web-iis.rules) 3202 - NETBIOS SMB winreg bind attempt (netbios.rules) 3203 - NETBIOS SMB winreg little endian bind attempt (netbios.rules) 3204 - NETBIOS SMB winreg unicode bind attempt (netbios.rules) 3205 - NETBIOS SMB winreg unicode little endian bind attempt (netbios.rules) 3206 - NETBIOS SMB winreg andx bind attempt (netbios.rules) 3207 - NETBIOS SMB winreg little endian andx bind attempt (netbios.rules) 3208 - NETBIOS SMB winreg unicode andx bind attempt (netbios.rules) 3209 - NETBIOS SMB winreg unicode little endian andx bind attempt (netbios.rules) 3210 - NETBIOS SMB-DS winreg bind attempt (netbios.rules) 3211 - NETBIOS SMB-DS winreg little endian bind attempt (netbios.rules) 3212 - NETBIOS SMB-DS winreg unicode bind attempt (netbios.rules) 3213 - NETBIOS SMB-DS winreg unicode little endian bind attempt (netbios.rules) 3214 - NETBIOS SMB-DS winreg andx bind attempt (netbios.rules) 3215 - NETBIOS SMB-DS winreg little endian andx bind attempt (netbios.rules) 3216 - NETBIOS SMB-DS winreg unicode andx bind attempt (netbios.rules) 3217 - NETBIOS SMB-DS winreg unicode little endian andx bind attempt (netbios.rules) 3218 - NETBIOS SMB OpenKey overflow attempt (netbios.rules) 3219 - NETBIOS SMB OpenKey little endian overflow attempt (netbios.rules) 3220 - NETBIOS SMB OpenKey unicode overflow attempt (netbios.rules) 3221 - NETBIOS SMB OpenKey unicode little endian overflow attempt (netbios.rules) 3222 - NETBIOS SMB OpenKey andx overflow attempt (netbios.rules) 3223 - NETBIOS SMB OpenKey little endian andx overflow attempt (netbios.rules) 3224 - NETBIOS SMB OpenKey unicode andx overflow attempt (netbios.rules) 3225 - NETBIOS SMB OpenKey unicode little endian andx overflow attempt (netbios.rules) 3226 - NETBIOS SMB-DS OpenKey overflow attempt (netbios.rules) 3227 - NETBIOS SMB-DS OpenKey little endian overflow attempt (netbios.rules) 3228 - NETBIOS SMB-DS OpenKey unicode overflow attempt (netbios.rules) 3229 - NETBIOS SMB-DS OpenKey unicode little endian overflow attempt (netbios.rules) 3230 - NETBIOS SMB-DS OpenKey andx overflow attempt (netbios.rules) 3231 - NETBIOS SMB-DS OpenKey little endian andx overflow attempt (netbios.rules) 3232 - NETBIOS SMB-DS OpenKey unicode andx overflow attempt (netbios.rules) 3233 - NETBIOS SMB-DS OpenKey unicode little endian andx overflow attempt (netbios.rules) 3234 - NETBIOS Messenger message little endian overflow attempt (netbios.rules) 3235 - NETBIOS Messenger message overflow attempt (netbios.rules) 3236 - NETBIOS DCERPC irot bind attempt (netbios.rules) 3237 - NETBIOS DCERPC irot little endian bind attempt (netbios.rules) 3238 - NETBIOS DCERPC IrotIsRunning attempt (netbios.rules) 3239 - NETBIOS DCERPC IrotIsRunning little endian attempt (netbios.rules) 3240 - NETBIOS SMB irot bind attempt (netbios.rules) 3241 - NETBIOS SMB irot little endian bind attempt (netbios.rules) 3242 - NETBIOS SMB irot unicode bind attempt (netbios.rules) 3243 - NETBIOS SMB irot unicode little endian bind attempt (netbios.rules) 3244 - NETBIOS SMB irot andx bind attempt (netbios.rules) 3245 - NETBIOS SMB irot little endian andx bind attempt (netbios.rules) 3246 - NETBIOS SMB irot unicode andx bind attempt (netbios.rules) 3247 - NETBIOS SMB irot unicode little endian andx bind attempt (netbios.rules) 3248 - NETBIOS SMB-DS irot bind attempt (netbios.rules) 3249 - NETBIOS SMB-DS irot little endian bind attempt (netbios.rules) 3250 - NETBIOS SMB-DS irot unicode bind attempt (netbios.rules) 3251 - NETBIOS SMB-DS irot unicode little endian bind attempt (netbios.rules) 3252 - NETBIOS SMB-DS irot andx bind attempt (netbios.rules) 3253 - NETBIOS SMB-DS irot little endian andx bind attempt (netbios.rules) 3254 - NETBIOS SMB-DS irot unicode andx bind attempt (netbios.rules) 3255 - NETBIOS SMB-DS irot unicode little endian andx bind attempt (netbios.rules) 3256 - NETBIOS SMB IrotIsRunning attempt (netbios.rules) 3257 - NETBIOS SMB IrotIsRunning little endian attempt (netbios.rules) 3258 - NETBIOS SMB IrotIsRunning unicode attempt (netbios.rules) 3259 - NETBIOS SMB IrotIsRunning unicode little endian attempt (netbios.rules) 3260 - NETBIOS SMB IrotIsRunning andx attempt (netbios.rules) 3261 - NETBIOS SMB IrotIsRunning little endian andx attempt (netbios.rules) 3262 - NETBIOS SMB IrotIsRunning unicode andx attempt (netbios.rules) 3263 - NETBIOS SMB IrotIsRunning unicode little endian andx attempt (netbios.rules) 3264 - NETBIOS SMB-DS IrotIsRunning attempt (netbios.rules) 3265 - NETBIOS SMB-DS IrotIsRunning little endian attempt (netbios.rules) 3266 - NETBIOS SMB-DS IrotIsRunning unicode attempt (netbios.rules) 3267 - NETBIOS SMB-DS IrotIsRunning unicode little endian attempt (netbios.rules) 3268 - NETBIOS SMB-DS IrotIsRunning andx attempt (netbios.rules) 3269 - NETBIOS SMB-DS IrotIsRunning little endian andx attempt (netbios.rules) 3270 - NETBIOS SMB-DS IrotIsRunning unicode andx attempt (netbios.rules) 3271 - NETBIOS SMB-DS IrotIsRunning unicode little endian andx attempt (netbios.rules) 3272 - BACKDOOR mydoom.a backdoor upload/execute attempt (backdoor.rules) 3273 - MS-SQL sa brute force failed login unicode attempt (sql.rules) 3274 - TELNET login buffer non-evasive overflow attempt (telnet.rules) 3275 - NETBIOS DCERPC IActivation bind attempt (netbios.rules) 3276 - NETBIOS DCERPC IActivation little endian bind attempt (netbios.rules) 3377 - NETBIOS SMB IActivation bind attempt (netbios.rules) 3378 - NETBIOS SMB IActivation little endian bind attempt (netbios.rules) 3379 - NETBIOS SMB IActivation unicode bind attempt (netbios.rules) 3380 - NETBIOS SMB IActivation unicode little endian bind attempt (netbios.rules) 3381 - NETBIOS SMB IActivation andx bind attempt (netbios.rules) 3382 - NETBIOS SMB IActivation little endian andx bind attempt (netbios.rules) 3383 - NETBIOS SMB IActivation unicode andx bind attempt (netbios.rules) 3384 - NETBIOS SMB IActivation unicode little endian andx bind attempt (netbios.rules) 3385 - NETBIOS SMB-DS IActivation bind attempt (netbios.rules) 3386 - NETBIOS SMB-DS IActivation little endian bind attempt (netbios.rules) 3387 - NETBIOS SMB-DS IActivation unicode bind attempt (netbios.rules) 3388 - NETBIOS SMB-DS IActivation unicode little endian bind attempt (netbios.rules) 3389 - NETBIOS SMB-DS IActivation andx bind attempt (netbios.rules) 3390 - NETBIOS SMB-DS IActivation little endian andx bind attempt (netbios.rules) 3391 - NETBIOS SMB-DS IActivation unicode andx bind attempt (netbios.rules) 3392 - NETBIOS SMB-DS IActivation unicode little endian andx bind attempt (netbios.rules) 3393 - NETBIOS SMB ISystemActivator bind attempt (netbios.rules) 3394 - NETBIOS SMB ISystemActivator little endian bind attempt (netbios.rules) 3395 - NETBIOS SMB ISystemActivator unicode bind attempt (netbios.rules) 3396 - NETBIOS SMB ISystemActivator unicode little endian bind attempt (netbios.rules) 3397 - NETBIOS SMB ISystemActivator andx bind attempt (netbios.rules) 3398 - NETBIOS SMB ISystemActivator little endian andx bind attempt (netbios.rules) 3399 - NETBIOS SMB ISystemActivator unicode andx bind attempt (netbios.rules) 3400 - NETBIOS SMB ISystemActivator unicode little endian andx bind attempt (netbios.rules) 3401 - NETBIOS SMB-DS ISystemActivator bind attempt (netbios.rules) 3402 - NETBIOS SMB-DS ISystemActivator little endian bind attempt (netbios.rules) 3403 - NETBIOS SMB-DS ISystemActivator unicode bind attempt (netbios.rules) 3404 - NETBIOS SMB-DS ISystemActivator unicode little endian bind attempt (netbios.rules) 3405 - NETBIOS SMB-DS ISystemActivator andx bind attempt (netbios.rules) 3406 - NETBIOS SMB-DS ISystemActivator little endian andx bind attempt (netbios.rules) 3407 - NETBIOS SMB-DS ISystemActivator unicode andx bind attempt (netbios.rules) 3408 - NETBIOS SMB-DS ISystemActivator unicode little endian andx bind attempt (netbios.rules) 3409 - NETBIOS SMB RemoteActivation attempt (netbios.rules) 3410 - NETBIOS SMB RemoteActivation little endian attempt (netbios.rules) 3411 - NETBIOS SMB RemoteActivation unicode attempt (netbios.rules) 3412 - NETBIOS SMB RemoteActivation unicode little endian attempt (netbios.rules) 3413 - NETBIOS SMB RemoteActivation andx attempt (netbios.rules) 3414 - NETBIOS SMB RemoteActivation little endian andx attempt (netbios.rules) 3415 - NETBIOS SMB RemoteActivation unicode andx attempt (netbios.rules) 3416 - NETBIOS SMB RemoteActivation unicode little endian andx attempt (netbios.rules) 3417 - NETBIOS SMB-DS RemoteActivation attempt (netbios.rules) 3418 - NETBIOS SMB-DS RemoteActivation little endian attempt (netbios.rules) 3419 - NETBIOS SMB-DS RemoteActivation unicode attempt (netbios.rules) 3420 - NETBIOS SMB-DS RemoteActivation unicode little endian attempt (netbios.rules) 3421 - NETBIOS SMB-DS RemoteActivation andx attempt (netbios.rules) 3422 - NETBIOS SMB-DS RemoteActivation little endian andx attempt (netbios.rules) 3423 - NETBIOS SMB-DS RemoteActivation unicode andx attempt (netbios.rules) 3424 - NETBIOS SMB-DS RemoteActivation unicode little endian andx attempt (netbios.rules) 3425 - NETBIOS SMB CoGetInstanceFromFile attempt (netbios.rules) 3426 - NETBIOS SMB CoGetInstanceFromFile little endian attempt (netbios.rules) 3427 - NETBIOS SMB CoGetInstanceFromFile unicode attempt (netbios.rules) 3428 - NETBIOS SMB CoGetInstanceFromFile unicode little endian attempt (netbios.rules) 3429 - NETBIOS SMB CoGetInstanceFromFile andx attempt (netbios.rules) 3430 - NETBIOS SMB CoGetInstanceFromFile little endian andx attempt (netbios.rules) 3431 - NETBIOS SMB CoGetInstanceFromFile unicode andx attempt (netbios.rules) 3432 - NETBIOS SMB CoGetInstanceFromFile unicode little endian andx attempt (netbios.rules) 3433 - NETBIOS SMB-DS CoGetInstanceFromFile attempt (netbios.rules) 3434 - NETBIOS SMB-DS CoGetInstanceFromFile little endian attempt (netbios.rules) 3435 - NETBIOS SMB-DS CoGetInstanceFromFile unicode attempt (netbios.rules) 3436 - NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian attempt (netbios.rules) 3437 - NETBIOS SMB-DS CoGetInstanceFromFile andx attempt (netbios.rules) 3438 - NETBIOS SMB-DS CoGetInstanceFromFile little endian andx attempt (netbios.rules) 3439 - NETBIOS SMB-DS CoGetInstanceFromFile unicode andx attempt (netbios.rules) 3440 - NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian andx attempt (netbios.rules) 3442 - DOS WIN32 TCP print service denial of service attempt (dos.rules) 3443 - MS-SQL DNS query with 1 requests (sql.rules) 3444 - MS-SQL DNS query with 2 requests (sql.rules) 3445 - MS-SQL DNS query with 3 requests (sql.rules) 3446 - MS-SQL DNS query with 4 requests (sql.rules) 3447 - MS-SQL DNS query with 5 requests (sql.rules) 3448 - MS-SQL DNS query with 6 requests (sql.rules) 3449 - MS-SQL DNS query with 7 requests (sql.rules) 3450 - MS-SQL DNS query with 8 requests (sql.rules) 3451 - MS-SQL DNS query with 9 requests (sql.rules) 3452 - MS-SQL DNS query with 10 requests (sql.rules) 3455 - EXPLOIT Bontago Game Server Nickname Buffer Overflow (exploit.rules) 3456 - MYSQL 4.0 root login attempt (mysql.rules) 3457 - EXPLOIT Arkeia backup client type 77 overflow attempt (exploit.rules) 3458 - EXPLOIT Arkeia backup client type 84 overflow attempt (exploit.rules) 3459 - P2P Manolito Search Query (p2p.rules) 3466 - WEB-MISC Authorization Basic overflow attempt (web-misc.rules) 3469 - WEB-CGI Ipswitch WhatsUp Gold dos attempt (web-cgi.rules) 3471 - WEB-CLIENT iTunes playlist URL overflow attempt (web-client.rules) 3472 - EXPLOIT ARCserve discovery service overflow (exploit.rules) 3473 - WEB-CLIENT RealPlayer SMIL file overflow attempt (web-client.rules) 3474 - EXPLOIT ARCserve backup TCP slot info msg client name overflow (exploit.rules) 3475 - EXPLOIT ARCserve backup TCP slot info msg client domain overflow (exploit.rules) 3476 - EXPLOIT ARCserve backup TCP product info msg 0x9b client domain overflow (exploit.rules) 3477 - EXPLOIT ARCserve backup TCP product info msg 0x9b client name overflow (exploit.rules) 3478 - EXPLOIT ARCserve backup TCP product info msg 0x9c client domain overflow (exploit.rules) 3479 - EXPLOIT ARCserve backup TCP product info msg 0x9c client name overflow (exploit.rules) 3480 - EXPLOIT ARCserve backup UDP slot info msg client name overflow (exploit.rules) 3481 - EXPLOIT ARCserve backup UDP slot info msg client domain overflow (exploit.rules) 3482 - EXPLOIT ARCserve backup UDP product info msg 0x9b client name overflow (exploit.rules) 3483 - EXPLOIT ARCserve backup UDP product info msg 0x9b client domain overflow (exploit.rules) 3484 - EXPLOIT ARCserve backup UDP product info msg 0x9c client name overflow (exploit.rules) 3485 - EXPLOIT ARCserve backup UDP product info msg 0x9c client domain overflow (exploit.rules) 3517 - EXPLOIT Computer Associates license PUTOLF overflow attempt (exploit.rules) 3518 - WEB-MISC MySQL MaxDB WebSQL wppassword buffer overflow (web-misc.rules) 3519 - WEB-MISC MySQL MaxDB WebSQL wppassword buffer overflow default port (web-misc.rules) 3520 - EXPLOIT Computer Associates license GCR NETWORK overflow attempt (exploit.rules) 3521 - EXPLOIT Computer Associates license GCR CHECKSUMS overflow attempt (exploit.rules) 3522 - EXPLOIT Computer Associates license GETCONFIG server overflow attempt (exploit.rules) 3523 - FTP SITE INDEX format string attempt (ftp.rules) 3524 - EXPLOIT Computer Associates license invalid GCR CHECKSUMS attempt (exploit.rules) 3525 - EXPLOIT Computer Associates license invalid GCR NETWORK attempt (exploit.rules) 3526 - ORACLE XDB FTP UNLOCK overflow attempt (oracle.rules) 3527 - EXPLOIT Solaris LPD overflow attempt (exploit.rules) 3528 - MYSQL CREATE FUNCTION attempt (mysql.rules) 3529 - EXPLOIT Computer Associates license GETCONFIG client overflow attempt (exploit.rules) 3530 - EXPLOIT ARCserve backup UDP msg 0x99 client name overflow (exploit.rules) 3531 - EXPLOIT ARCserve backup UDP msg 0x99 client domain overflow (exploit.rules) 3533 - TELNET client LINEMODE SLC overflow attempt (telnet.rules) 3534 - WEB-CLIENT Mozilla GIF heap overflow (web-client.rules) 3536 - WEB-CLIENT Mozilla GIF multipacket heap overflow (web-client.rules) 3537 - TELNET client ENV OPT escape overflow attempt (telnet.rules) 3538 - EXPLOIT RADIUS registration MSID overflow attempt (exploit.rules) 3539 - EXPLOIT RADIUS MSID overflow attempt (exploit.rules) 3540 - EXPLOIT RADIUS registration vendor ATTR_TYPE_STR overflow attempt (exploit.rules) 3541 - EXPLOIT RADIUS ATTR_TYPE_STR overflow attempt (exploit.rules) 3542 - MS-SQL SA brute force login attempt (sql.rules) 3543 - MS-SQL SA brute force login attempt TDS v7/8 (sql.rules) 3544 - WEB-MISC TrackerCam ComGetLogFile.php3 directory traversal attempt (web-misc.rules) 3545 - WEB-MISC TrackerCam ComGetLogFile.php3 log information disclosure (web-misc.rules) 3546 - WEB-MISC TrackerCam User-Agent buffer overflow attempt (web-misc.rules) 3547 - WEB-MISC TrackerCam overly long php parameter overflow attempt (web-misc.rules) 3548 - WEB-MISC TrackerCam negative Content-Length attempt (web-misc.rules) 3550 - WEB-CLIENT HTML http scheme hostname overflow attempt (web-client.rules) 3552 - WEB-CLIENT OLE32 MSHTA masquerade attempt (web-client.rules) 3554 - NETBIOS DCERPC-DIRECT mqqm bind attempt (netbios.rules) 3555 - NETBIOS DCERPC-DIRECT mqqm little endian bind attempt (netbios.rules) 3556 - NETBIOS DCERPC mqqm bind attempt (netbios.rules) 3557 - NETBIOS DCERPC mqqm little endian bind attempt (netbios.rules) 3558 - NETBIOS SMB mqqm WriteAndX andx bind attempt (netbios.rules) 3559 - NETBIOS SMB mqqm WriteAndX bind attempt (netbios.rules) 3560 - NETBIOS SMB mqqm WriteAndX little endian andx bind attempt (netbios.rules) 3561 - NETBIOS SMB mqqm WriteAndX little endian bind attempt (netbios.rules) 3562 - NETBIOS SMB mqqm WriteAndX unicode andx bind attempt (netbios.rules) 3563 - NETBIOS SMB mqqm WriteAndX unicode bind attempt (netbios.rules) 3564 - NETBIOS SMB mqqm WriteAndX unicode little endian andx bind attempt (netbios.rules) 3565 - NETBIOS SMB mqqm WriteAndX unicode little endian bind attempt (netbios.rules) 3566 - NETBIOS SMB mqqm andx bind attempt (netbios.rules) 3567 - NETBIOS SMB mqqm bind attempt (netbios.rules) 3568 - NETBIOS SMB mqqm little endian andx bind attempt (netbios.rules) 3569 - NETBIOS SMB mqqm little endian bind attempt (netbios.rules) 3570 - NETBIOS SMB mqqm unicode andx bind attempt (netbios.rules) 3571 - NETBIOS SMB mqqm unicode bind attempt (netbios.rules) 3572 - NETBIOS SMB mqqm unicode little endian andx bind attempt (netbios.rules) 3573 - NETBIOS SMB mqqm unicode little endian bind attempt (netbios.rules) 3574 - NETBIOS SMB-DS mqqm WriteAndX andx bind attempt (netbios.rules) 3575 - NETBIOS SMB-DS mqqm WriteAndX bind attempt (netbios.rules) 3576 - NETBIOS SMB-DS mqqm WriteAndX little endian andx bind attempt (netbios.rules) 3577 - NETBIOS SMB-DS mqqm WriteAndX little endian bind attempt (netbios.rules) 3578 - NETBIOS SMB-DS mqqm WriteAndX unicode andx bind attempt (netbios.rules) 3579 - NETBIOS SMB-DS mqqm WriteAndX unicode bind attempt (netbios.rules) 3580 - NETBIOS SMB-DS mqqm WriteAndX unicode little endian andx bind attempt (netbios.rules) 3581 - NETBIOS SMB-DS mqqm WriteAndX unicode little endian bind attempt (netbios.rules) 3582 - NETBIOS SMB-DS mqqm andx bind attempt (netbios.rules) 3583 - NETBIOS SMB-DS mqqm bind attempt (netbios.rules) 3584 - NETBIOS SMB-DS mqqm little endian andx bind attempt (netbios.rules) 3585 - NETBIOS SMB-DS mqqm little endian bind attempt (netbios.rules) 3586 - NETBIOS SMB-DS mqqm unicode andx bind attempt (netbios.rules) 3587 - NETBIOS SMB-DS mqqm unicode bind attempt (netbios.rules) 3588 - NETBIOS SMB-DS mqqm unicode little endian andx bind attempt (netbios.rules) 3589 - NETBIOS SMB-DS mqqm unicode little endian bind attempt (netbios.rules) 3590 - NETBIOS DCERPC-DIRECT mqqm QMDeleteObject little endian overflow attempt (netbios.rules) 3591 - NETBIOS DCERPC-DIRECT mqqm QMDeleteObject overflow attempt (netbios.rules) 3592 - NETBIOS DCERPC mqqm QMDeleteObject little endian overflow attempt (netbios.rules) 3593 - NETBIOS DCERPC mqqm QMDeleteObject overflow attempt (netbios.rules) 3594 - NETBIOS SMB mqqm QMDeleteObject WriteAndX andx overflow attempt (netbios.rules) 3595 - NETBIOS SMB mqqm QMDeleteObject WriteAndX little endian andx overflow attempt (netbios.rules) 3596 - NETBIOS SMB mqqm QMDeleteObject WriteAndX little endian overflow attempt (netbios.rules) 3597 - NETBIOS SMB mqqm QMDeleteObject WriteAndX overflow attempt (netbios.rules) 3598 - NETBIOS SMB mqqm QMDeleteObject WriteAndX unicode andx overflow attempt (netbios.rules) 3599 - NETBIOS SMB mqqm QMDeleteObject WriteAndX unicode little endian andx overflow attempt (netbios.rules) 3600 - NETBIOS SMB mqqm QMDeleteObject WriteAndX unicode little endian overflow attempt (netbios.rules) 3601 - NETBIOS SMB mqqm QMDeleteObject WriteAndX unicode overflow attempt (netbios.rules) 3602 - NETBIOS SMB mqqm QMDeleteObject andx overflow attempt (netbios.rules) 3603 - NETBIOS SMB mqqm QMDeleteObject little endian andx overflow attempt (netbios.rules) 3604 - NETBIOS SMB mqqm QMDeleteObject little endian overflow attempt (netbios.rules) 3605 - NETBIOS SMB mqqm QMDeleteObject overflow attempt (netbios.rules) 3606 - NETBIOS SMB mqqm QMDeleteObject unicode andx overflow attempt (netbios.rules) 3607 - NETBIOS SMB mqqm QMDeleteObject unicode little endian andx overflow attempt (netbios.rules) 3608 - NETBIOS SMB mqqm QMDeleteObject unicode little endian overflow attempt (netbios.rules) 3609 - NETBIOS SMB mqqm QMDeleteObject unicode overflow attempt (netbios.rules) 3610 - NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX andx overflow attempt (netbios.rules) 3611 - NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX little endian andx overflow attempt (netbios.rules) 3612 - NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX little endian overflow attempt (netbios.rules) 3613 - NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX overflow attempt (netbios.rules) 3614 - NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX unicode andx overflow attempt (netbios.rules) 3615 - NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX unicode little endian andx overflow attempt (netbios.rules) 3616 - NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX unicode little endian overflow attempt (netbios.rules) 3617 - NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX unicode overflow attempt (netbios.rules) 3618 - NETBIOS SMB-DS mqqm QMDeleteObject andx overflow attempt (netbios.rules) 3619 - NETBIOS SMB-DS mqqm QMDeleteObject little endian andx overflow attempt (netbios.rules) 3620 - NETBIOS SMB-DS mqqm QMDeleteObject little endian overflow attempt (netbios.rules) 3621 - NETBIOS SMB-DS mqqm QMDeleteObject overflow attempt (netbios.rules) 3622 - NETBIOS SMB-DS mqqm QMDeleteObject unicode andx overflow attempt (netbios.rules) 3623 - NETBIOS SMB-DS mqqm QMDeleteObject unicode little endian andx overflow attempt (netbios.rules) 3624 - NETBIOS SMB-DS mqqm QMDeleteObject unicode little endian overflow attempt (netbios.rules) 3625 - NETBIOS SMB-DS mqqm QMDeleteObject unicode overflow attempt (netbios.rules) 3632 - WEB-CLIENT Mozilla bitmap width integer overflow attempt (web-client.rules) 3634 - WEB-CLIENT Mozilla bitmap width integer overflow multipacket attempt (web-client.rules) 3635 - BACKDOOR Amanda 2.0 connection established (backdoor.rules) 3637 - EXPLOIT Computer Associates license PUTOLF directory traversal attempt (exploit.rules) 3651 - EXPLOIT CVS rsh annotate revision overflow attempt (exploit.rules) 3652 - EXPLOIT CVS pserver annotate revision overflow attempt (exploit.rules) 3657 - ORACLE ctxsys.driload attempt (oracle.rules) 3658 - EXPLOIT ARCserve backup universal agent option 1000 little endian buffer overflow attempt (exploit.rules) 3659 - EXPLOIT ARCserve backup universal agent option 1000 buffer overflow attempt (exploit.rules) 3660 - EXPLOIT ARCserve backup universal agent option 00 little endian buffer overflow attempt (exploit.rules) 3661 - EXPLOIT ARCserve backup universal agent option 00 buffer overflow attempt (exploit.rules) 3662 - EXPLOIT ARCserve backup universal agent option 03 little endian buffer overflow attempt (exploit.rules) 3663 - EXPLOIT ARCserve backup universal agent option 03 buffer overflow attempt (exploit.rules) 3664 - EXPLOIT PPTP echo request buffer overflow attempt (exploit.rules)
