iSID Analyst Knowledge Base

Definitions, and additional context on iSID alerts along with helpful recommendations

Category: File-Other

( 1 Alerts)

FILE-OTHER Multiple Products SGI ZSIZE handling buffer overflow attempt

the message indicates an attempt to exploit a buffer overflow in the SGI ZSIZE handling in multiple products. The rule matches on TCP traffic with specific content in the file data that indicates a potential buffer overflow attempt.