##alert tcp $EXTERNAL_NET 6667 -> $HOME_NET any (msg:"ET EXPLOIT mIRC <=6.12 DCC Buffer Overflow"; flow: to_client, established; content:"DCC SEND "; nocase; isdataat: 100, relative; reference:bugtraq,8880; classtype: attempted-dos; reference:url,doc.emergingthreats.net/bin/view/Main/2000329; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_MIRC_Overflow; sid:2000329; rev:8;)

Added 2010-06-23 13:46:09 UTC

##alert tcp $EXTERNAL_NET 6667 -> $HOME_NET any (msg:"ET EXPLOIT mIRC <=6.12 DCC Buffer Overflow"; flow: to_client, established; content:"DCC SEND "; nocase; isdataat: 100, relative; reference:bugtraq,8880; classtype: attempted-dos; reference:url,doc.emergingthreats.net/bin/view/Main/2000329; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_MIRC_Overflow; sid:2000329; rev:8;)

Added 2010-06-23 13:46:09 UTC

##alert tcp $EXTERNAL_NET 6667 -> $HOME_NET any (msg:"ET EXPLOIT mIRC <=6.12 DCC Buffer Overflow"; flow: to_client, established; content:"DCC SEND "; nocase; isdataat: 100, relative; reference:bugtraq,8880; classtype: attempted-dos; reference:url,doc.emergingthreats.net/bin/view/Main/2000329; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_MIRC_Overflow; sid: 2000329; rev:8;)

Added 2010-01-12 10:00:45 UTC

##alert tcp $EXTERNAL_NET 6667 -> $HOME_NET any (msg:"ET EXPLOIT mIRC <=6.12 DCC Buffer Overflow"; flow: to_client, established; content:"DCC SEND "; nocase; isdataat: 100, relative; reference:bugtraq,8880; classtype: attempted-dos; reference:url,doc.emergingthreats.net/bin/view/Main/2000329; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_MIRC_Overflow; sid: 2000329; rev:8;)

Added 2010-01-12 10:00:45 UTC

alert tcp $EXTERNAL_NET 6667 -> $HOME_NET any (msg:"ET EXPLOIT mIRC <=6.12 DCC Buffer Overflow"; flow: to_client, established; content:"DCC SEND "; nocase; isdataat: 100, relative; reference:bugtraq,8880; classtype: attempted-dos; reference:url,doc.emergingthreats.net/bin/view/Main/2000329; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_MIRC_Overflow; sid: 2000329; rev:8;)

Added 2009-02-07 22:00:25 UTC

alert tcp $EXTERNAL_NET 6667 -> $HOME_NET any (msg:"ET EXPLOIT mIRC <=6.12 DCC Buffer Overflow"; flow: to_client, established; content:"DCC SEND "; nocase; isdataat: 100, relative; reference:bugtraq,8880; classtype: attempted-dos; reference:url,doc.emergingthreats.net/bin/view/Main/2000329; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_MIRC_Overflow; sid: 2000329; rev:8;)

Added 2009-02-07 22:00:25 UTC

alert tcp $EXTERNAL_NET 6667 -> $HOME_NET any (msg:"ET EXPLOIT mIRC <=6.12 DCC Buffer Overflow"; flow: to_client, established; content:"DCC SEND "; nocase; isdataat: 100, relative; reference:bugtraq,8880; classtype: attempted-dos; sid: 2000329; rev:7;)

Added 2008-01-25 10:56:37 UTC

alert tcp $EXTERNAL_NET 6667 -> $HOME_NET any (msg:"ET EXPLOIT mIRC <=6.12 DCC Buffer Overflow"; flow: to_client, established; content:"DCC SEND "; nocase; isdataat: 100, relative; reference:bugtraq,8880; classtype: attempted-dos; sid: 2000329; rev:7;)

Added 2008-01-25 10:56:37 UTC

alert tcp $EXTERNAL_NET 6667 -> $HOME_NET any (msg: "BLEEDING-EDGE EXPLOIT mIRC <=6.12 DCC Buffer Overflow"; flow: to_client, established; content:"DCC SEND "; nocase; isdataat: 100, relative; reference:bugtraq,8880; classtype: attempted-dos; sid: 2000329; rev:6; )