alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SERVER HP OpenView? Network Node Manager OvWebHelp?.exe Heap Buffer Overflow Attempt"; flow:established,to_server; content:"POST"; nocase; http_method; content:"/OvCgi/OvWebHelp.exe"; nocase; http_uri; content:"Topic="; nocase; isdataat:1000,relative; content:!"|0A|"; within:1000; reference:cve,2009-4178; reference:url,doc.emergingthreats.net/2010970; classtype:web-application-attack; sid:2010970; rev:3;)

Added 2011-10-12 19:31:02 UTC

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SERVER HP OpenView? Network Node Manager OvWebHelp?.exe Heap Buffer Overflow Attempt"; flow:established,to_server; content:"POST"; nocase; http_method; content:"/OvCgi/OvWebHelp.exe"; nocase; http_uri; content:"Topic="; nocase; isdataat:1000,relative; content:!"|0A|"; within:1000; classtype:web-application-attack; reference:cve,2009-4178; reference:url,doc.emergingthreats.net/2010970; sid:2010970; rev:3;)

Added 2011-09-14 22:44:10 UTC

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SERVER HP OpenView? Network Node Manager OvWebHelp?.exe Heap Buffer Overflow Attempt"; flow:established,to_server; content:"POST"; nocase; http_method; content:"/OvCgi/OvWebHelp.exe"; nocase; http_uri; content:"Topic="; nocase; isdataat:1000,relative; content:!"|0A|"; within:1000; classtype:web-application-attack; reference:cve,2009-4178; reference:url,doc.emergingthreats.net/2010970; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/sigs/WEB_SERVER/WEB_HP_Openview; sid:2010970; rev:3;)

Added 2011-02-04 17:30:40 UTC

alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET WEB_SERVER HP OpenView? Network Node Manager OvWebHelp?.exe Heap Buffer Overflow Attempt"; flow:established,to_server; content:"POST "; depth:5; nocase; uricontent:"/OvCgi/OvWebHelp.exe"; nocase; content:"Topic="; nocase; isdataat:1000,relative; content:!"|0A|"; within:1000; classtype:web-application-attack; reference:cve,2009-4178; reference:url,doc.emergingthreats.net/2010970; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/sigs/WEB_SERVER/WEB_HP_Openview; sid:2010970; rev:3;)

Added 2010-08-20 14:16:25 UTC

alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET WEB_SERVER HP OpenView? Network Node Manager OvWebHelp?.exe Heap Buffer Overflow Attempt"; flow:established,to_server; content:"POST "; depth:5; nocase; uricontent:"/OvCgi/OvWebHelp.exe"; nocase; content:"Topic="; nocase; isdataat:1000,relative; content:!"|0A|"; within:1000; classtype:web-application-attack; reference:cve,2009-4178; reference:url,doc.emergingthreats.net/2010970; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/sigs/WEB_SERVER/WEB_HP_Openview; sid:2010970; rev:3;)

Added 2010-08-20 14:16:25 UTC

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SERVER HP OpenView? Network Node Manager OvWebHelp?.exe Heap Buffer Overflow Attempt"; flow:established,to_server; content:"POST "; depth:5; nocase; uricontent:"/OvCgi/OvWebHelp.exe"; nocase; content:"Topic="; nocase; isdataat:1000,relative; content:!"|0A|"; within:1000; classtype:web-application-attack; reference:cve,2009-4178; reference:url,doc.emergingthreats.net/2010970; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/sigs/WEB_SERVER/WEB_HP_Openview; sid:2010970; rev:2;)

Added 2010-04-03 08:12:59 UTC