#alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"ET VOIP SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; depth:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; reference:bugtraq,16213; reference:cve,2006-0189; reference:url,doc.emergingthreats.net/bin/view/Main/2002848; classtype:attempted-user; sid:2002848; rev:7; metadata:created_at 2010_07_30, updated_at 2010_07_30;)

Added 2018-09-13 19:38:17 UTC

Please enter documentation, comments, false positives, or concerns with this signature. Press the Attach button below to add samples or Pcaps.

---

Added 2018-09-13 17:52:59 UTC

---

#alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"ET VOIP SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; depth:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; reference:bugtraq,16213; reference:cve,2006-0189; reference:url,doc.emergingthreats.net/bin/view/Main/2002848; classtype:attempted-user; sid:2002848; rev:7; metadata:created_at 2010_07_30, updated_at 2010_07_30;)

Added 2017-08-07 20:56:16 UTC

---

#alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"ET VOIP SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; depth:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; reference:bugtraq,16213; reference:cve,2006-0189; reference:url,doc.emergingthreats.net/bin/view/Main/2002848; classtype:attempted-user; sid:2002848; rev:7;)

Added 2017-05-11 17:17:18 UTC

---

alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"ET VOIP SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; depth:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; reference:bugtraq,16213; reference:cve,2006-0189; reference:url,doc.emergingthreats.net/bin/view/Main/2002848; classtype:attempted-user; sid:2002848; rev:7;)

Added 2011-10-12 19:12:23 UTC

---

alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"ET VOIP SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; depth:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; classtype:attempted-user; reference:bugtraq,16213; reference:cve,2006-0189; reference:url,doc.emergingthreats.net/bin/view/Main/2002848; sid:2002848; rev:7;)

Added 2011-09-14 22:25:18 UTC

---

alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"ET VOIP SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; depth:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; classtype:attempted-user; reference:bugtraq,16213; reference:cve,2006-0189; reference:url,doc.emergingthreats.net/bin/view/Main/2002848; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_SIP; sid:2002848; rev:7;)

Added 2011-02-04 17:22:05 UTC

---

alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"ET VOIP SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; depth:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; reference: bugtraq,16213; reference:cve,2006-0189; classtype:attempted-user; reference:url,doc.emergingthreats.net/bin/view/Main/2002848; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_SIP; sid:2002848; rev:7;)

Added 2010-01-12 10:00:45 UTC

---

alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"ET VOIP SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; depth:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; reference: bugtraq,16213; reference:cve,2006-0189; classtype:attempted-user; reference:url,doc.emergingthreats.net/bin/view/Main/2002848; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_SIP; sid:2002848; rev:7;)

Added 2010-01-12 10:00:45 UTC

---

alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"ET EXPLOIT SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; depth:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; reference: bugtraq,16213; reference:cve,2006-0189; classtype:attempted-user; reference:url,doc.emergingthreats.net/bin/view/Main/2002848; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_SIP; sid:2002848; rev:6;)

Added 2009-03-04 10:30:25 UTC

---

alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"ET EXPLOIT SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; depth:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; reference: bugtraq,16213; reference:cve,2006-0189; classtype:attempted-user; reference:url,doc.emergingthreats.net/bin/view/Main/2002848; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_SIP; sid:2002848; rev:6;)

Added 2009-03-04 10:30:25 UTC

---

alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"ET EXPLOIT SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; within:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; reference: bugtraq,16213; reference:cve,2006-0189; classtype:attempted-user; reference:url,doc.emergingthreats.net/bin/view/Main/2002848; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_SIP; sid:2002848; rev:6;)

Added 2009-02-07 22:00:26 UTC

---

alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"ET EXPLOIT SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; within:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; reference: bugtraq,16213; reference:cve,2006-0189; classtype:attempted-user; reference:url,doc.emergingthreats.net/bin/view/Main/2002848; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_SIP; sid:2002848; rev:6;)

Added 2009-02-07 22:00:26 UTC

---

alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"ET EXPLOIT SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; within:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; reference: bugtraq,16213; reference:cve,2006-0189; classtype:attempted-user; sid:2002848; rev:5;)

Added 2008-12-16 18:15:23 UTC

---

alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"ET EXPLOIT SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; within:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; reference: bugtraq,16213; reference:cve,2006-0189; classtype:attempted-user; sid:2002848; rev:5;)

Added 2008-12-16 18:15:23 UTC

---

alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"ET EXPLOIT SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; within:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; reference: bugtraq,16213; reference: cve,2006-0189; classtype:attempted-user; sid:2002848; rev:4;)

Added 2008-01-25 10:56:38 UTC

---

alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg:"ET EXPLOIT SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; within:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; reference: bugtraq,16213; reference: cve,2006-0189; classtype:attempted-user; sid:2002848; rev:4;)

Added 2008-01-25 10:56:38 UTC

---

alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg: "BLEEDING-EDGE EXPLOIT SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; within:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; reference: bugtraq,16213; reference: cve,2006-0189; classtype:attempted-user; sid:2002848; rev: 3;)

Added 2007-09-08 00:16:43 UTC

---

alert udp $EXTERNAL_NET any -> $HOME_NET 5060 (msg: "BLEEDING-EDGE EXPLOIT SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; within:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; reference: bugtraq,16213; reference: cve,2006-0189; classtype:attempted-user; sid:2002848; rev: 3;)

Added 2007-09-08 00:16:43 UTC

---

alert udp $EXTERNAL_NET ANY -> $HOME_NET 5060 (msg: "BLEEDING-EDGE EXPLOIT SIP UDP Softphone INVITE overflow"; dsize:>1000; content:"INVITE"; within:6; nocase; pcre:"/\r?\n\r?\n/R"; isdataat:1000,relative; reference: bugtraq,16213; reference: cve,2006-0189; classtype:attempted-user; sid:2002848; rev: 2; )

---

---