Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Snort-Signatures
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

[Snort-sigs] Snort Community Rules Update

from [Alex Kirk] Network Security [Permanent Link]
Subject: [Snort-sigs] Snort Community Rules Update
Date: Thu, 13 Oct 2005 12:43:56 -0400
This message is to announce the availability of an update for the Sourcefire community rule set, which can be downloaded free of cost or registration from http://www.snort.org/pub-bin/downloads.cgi.

New rules in this release are identified as SIDs 100000165-100000168. They cover a buffer overflow attack against the Sentinel License Manager and a denial of service attack against Oracle databases, and provide detection for two vectors of the Hydra password-cracking tool.

Sourcefire would like to thank rmkml for submitting these rules. As a reminder, anyone who wishes to submit rules may do so at http://www.snort.org/reg-bin/rulesubmit.cgi.

A list of new rules and their SIDs follows.

Alex Kirk
Community Rules Maintainer
Sourcefire, Inc.

100000165 || COMMUNITY EXPLOIT Sentinel LM exploit
100000166 || COMMUNITY ORACLE TNS Listener shutdown via iSQLPlus attempt
100000167 || COMMUNITY SMTP Hydra Activity Detected
100000168 || COMMUNITY WEB-ATTACKS Hydra Activity Detected


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs

[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  [Snort-sigs] New rule for detect Amap fingerprint (http), rmkml
Next by Date:  [Snort-sigs] New rule for detect GFI MailSecurity Header Overflow, rmkml
Previous by Thread:  [Snort-sigs] New rule for detect Amap fingerprint (http), rmkml
Next by Thread:  [Snort-sigs] Snort Community Rules Update, Sourcefire VRT
Indexes:  [Date] [Thread] [Top] [All Lists]