Signature Detail
Short Name |
DOS:WINDOWS:WGC-VZMN-JP-CGSI |
|---|---|
Severity |
Critical |
Recommended |
No |
Category |
DOS |
Keywords |
IXIA FAIL WinNuke NetBIOS |
Release Date |
2012/11/09 |
Update Number |
2202 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
DOS: WinGenocide/VzmNuker/JayPee/CGSI Attempt
This signature detects the payload of WinGenocide, also known as VzmNuker, JayPee, or CGSI. Some IPS testing tools do not correctly send the Urgent flag which is required to properly exploit this issue, and therefore do not trigger on DOS:WINDOWS:WINNUKE-NETBIOS.