MS09-050 SMB2.0 vulnerability detection rule

alert any any -> any 445 (msg:”MS SMB2 Negotiate protocol request vulnerability; flow:established, to_server; content:”|00|”; offset:0; depth:1; content:”|ff534d4272|”; distance:3; within:5; content:!”|0000|”; distance:7; within:2;)

Advertisements

About this entry