HTTP: IIS SQL Server xp_enumdsn Attempt
This signature detects attempts to use the Microsoft SQL Server xp_enumdsn command.
Extended Description
Attackers may be calling the xp_enumdsn function in order to gain sensitive information in preparation for further attacks. Of course, legitimate users may be calling it in order to retrieve information they require for normal database use.
Short Name
HTTP:IIS:ENUMDSN-ATTEMPT
Severity
Warning
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
Attempt IIS SQL Server xp_enumdsn
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown