#alert http $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SERVER HP
OpenView? Network Node Manager
OvWebHelp?.exe Heap Buffer Overflow Attempt"; flow:established,to_server; content:"POST "; depth:5; nocase; uricontent:"/OvCgi/OvWebHelp.exe"; nocase; content:"Topic="; nocase; isdataat:1000,relative; content:!"|0A|"; within:1000; reference:cve,2009-4178; reference:url,doc.emergingthreats.net/2010970; classtype:web-application-attack; sid:2010970; rev:3; metadata:created_at 2010_07_30, updated_at 2010_07_30;)
Added 2017-12-21 16:30:37 UTC
alert http $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SERVER HP
OpenView? Network Node Manager
OvWebHelp?.exe Heap Buffer Overflow Attempt"; flow:established,to_server; content:"POST "; depth:5; nocase; uricontent:"/OvCgi/OvWebHelp.exe"; nocase; content:"Topic="; nocase; isdataat:1000,relative; content:!"|0A|"; within:1000; reference:cve,2009-4178; reference:url,doc.emergingthreats.net/2010970; classtype:web-application-attack; sid:2010970; rev:3; metadata:created_at 2010_07_30, updated_at 2010_07_30;)
Added 2017-08-07 21:04:08 UTC
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SERVER HP
OpenView? Network Node Manager
OvWebHelp?.exe Heap Buffer Overflow Attempt"; flow:established,to_server; content:"POST"; nocase; http_method; content:"/OvCgi/OvWebHelp.exe"; nocase; http_uri; content:"Topic="; nocase; isdataat:1000,relative; content:!"|0A|"; within:1000; reference:cve,2009-4178; reference:url,doc.emergingthreats.net/2010970; classtype:web-application-attack; sid:2010970; rev:3;)
Added 2011-10-12 19:31:02 UTC
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SERVER HP
OpenView? Network Node Manager
OvWebHelp?.exe Heap Buffer Overflow Attempt"; flow:established,to_server; content:"POST"; nocase; http_method; content:"/OvCgi/OvWebHelp.exe"; nocase; http_uri; content:"Topic="; nocase; isdataat:1000,relative; content:!"|0A|"; within:1000; classtype:web-application-attack; reference:cve,2009-4178; reference:url,doc.emergingthreats.net/2010970; sid:2010970; rev:3;)
Added 2011-09-14 22:44:10 UTC
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SERVER HP
OpenView? Network Node Manager
OvWebHelp?.exe Heap Buffer Overflow Attempt"; flow:established,to_server; content:"POST"; nocase; http_method; content:"/OvCgi/OvWebHelp.exe"; nocase; http_uri; content:"Topic="; nocase; isdataat:1000,relative; content:!"|0A|"; within:1000; classtype:web-application-attack; reference:cve,2009-4178; reference:url,doc.emergingthreats.net/2010970; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/sigs/WEB_SERVER/WEB_HP_Openview; sid:2010970; rev:3;)
Added 2011-02-04 17:30:40 UTC
alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET WEB_SERVER HP
OpenView? Network Node Manager
OvWebHelp?.exe Heap Buffer Overflow Attempt"; flow:established,to_server; content:"POST "; depth:5; nocase; uricontent:"/OvCgi/OvWebHelp.exe"; nocase; content:"Topic="; nocase; isdataat:1000,relative; content:!"|0A|"; within:1000; classtype:web-application-attack; reference:cve,2009-4178; reference:url,doc.emergingthreats.net/2010970; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/sigs/WEB_SERVER/WEB_HP_Openview; sid:2010970; rev:3;)
Added 2010-08-20 14:16:25 UTC
alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET WEB_SERVER HP
OpenView? Network Node Manager
OvWebHelp?.exe Heap Buffer Overflow Attempt"; flow:established,to_server; content:"POST "; depth:5; nocase; uricontent:"/OvCgi/OvWebHelp.exe"; nocase; content:"Topic="; nocase; isdataat:1000,relative; content:!"|0A|"; within:1000; classtype:web-application-attack; reference:cve,2009-4178; reference:url,doc.emergingthreats.net/2010970; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/sigs/WEB_SERVER/WEB_HP_Openview; sid:2010970; rev:3;)
Added 2010-08-20 14:16:25 UTC
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"ET WEB_SERVER HP
OpenView? Network Node Manager
OvWebHelp?.exe Heap Buffer Overflow Attempt"; flow:established,to_server; content:"POST "; depth:5; nocase; uricontent:"/OvCgi/OvWebHelp.exe"; nocase; content:"Topic="; nocase; isdataat:1000,relative; content:!"|0A|"; within:1000; classtype:web-application-attack; reference:cve,2009-4178; reference:url,doc.emergingthreats.net/2010970; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/sigs/WEB_SERVER/WEB_HP_Openview; sid:2010970; rev:2;)
Added 2010-04-03 08:12:59 UTC