Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2000-0377

CVSS 5.0 16 detections found
View on NVD →
The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka the "Remote Registry Access Authentication" vulnerability.

Detection rules

Source Rule Status Updated
suricata GPL NETBIOS SMB OpenKey little endian overflow attempt rev 4 2019-07-26
suricata GPL NETBIOS SMB OpenKey overflow attempt rev 5 2019-07-26
suricata GPL NETBIOS SMB OpenKey unicode little endian overflow attempt rev 4 2019-07-26
suricata GPL NETBIOS SMB OpenKey unicode overflow attempt rev 4 2019-07-26
suricata GPL NETBIOS SMB-DS OpenKey little endian overflow attempt rev 4 2019-07-26
suricata GPL NETBIOS SMB-DS OpenKey overflow attempt rev 4 2019-07-26
suricata GPL NETBIOS SMB-DS OpenKey unicode little endian overflow attempt rev 4 2019-07-26
suricata GPL NETBIOS SMB-DS OpenKey unicode overflow attempt rev 4 2019-07-26
snort GPL NETBIOS SMB OpenKey little endian overflow attempt rev 4 2011-09-20
snort GPL NETBIOS SMB OpenKey overflow attempt rev 5 2011-09-20
snort GPL NETBIOS SMB OpenKey unicode little endian overflow attempt rev 4 2011-09-20
snort GPL NETBIOS SMB OpenKey unicode overflow attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS OpenKey little endian overflow attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS OpenKey overflow attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS OpenKey unicode little endian overflow attempt rev 4 2011-09-20
snort GPL NETBIOS SMB-DS OpenKey unicode overflow attempt rev 4 2011-09-20