Network Security Archives

Snort IDS Signatures Development (date)

[Thread Index] [Top] [All Lists]

November 30, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:42
[Snort-sigs] help for contribute new rule webmin miniserv.pl format string, rmkml, 12:46

November 29, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:19
[Snort-sigs] FP with sid 1399 (WEB-PHP PHP-Nuke remote file include attempt), rmkml, 19:58
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 15:56
Re: [Snort-sigs] new rule for detect recently cisco web access, Brian Caswell, 14:35
[Snort-sigs] new rule for detect recently cisco web access, rmkml, 09:02

November 28, 2005

Re: [Snort-sigs] odd rule behaviour ???, Joel Esler, 22:07
Re: [Snort-sigs] odd rule behaviour ???, Patrick Walsh, 20:56
Re: [Snort-sigs] odd rule behaviour ???, Frank Knobbe, 20:46
[Snort-sigs] odd rule behaviour ???, Russell Fulton, 19:25

November 27, 2005

[Snort-sigs] new rule for detect icmp undefined code (>18), rmkml, 20:07

November 26, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:19

November 25, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:19

November 24, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:17

November 23, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:27
[Snort-sigs] Getting FPs for EXPLOIT CDE dtspcd exploit attempt from WoW traffic, Russell Fulton, 20:06
[Snort-sigs] PFs for NETBIOS SMB SMB_COM_TRANSACTION Max Parameter and Max Count of 0 DOS Attempt, sid:2101, Russell Fulton, 17:54
[Snort-sigs] new rule for detect Jetty source code disclosure, rmkml, 11:20
Re: [Snort-sigs] FP for sid 2000538, Chich Thierry, 07:38
[Snort-sigs] FP for sid 2000538, Chich Thierry, 06:18
Re: [Snort-sigs] FP 100000122 mod_jrun, Chich Thierry, 05:58
Re: [Snort-sigs] FP on "NETBIOS SMB-DS Trans2 FIND_FIRST2 response andx overflow attempt", Brian Caswell, 01:26

November 22, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:24
[Snort-sigs] Confirmed Coverage of Microsoft IE Proof of Concept Exploit, Sourcefire VRT, 18:12

November 21, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:22
[Snort-sigs] FP on NETBIOS SMB-DS Trans2 FIND_FIRST2 response overflow attempt, Russell Fulton, 20:31
[Snort-sigs] FP on "NETBIOS SMB-DS Trans2 FIND_FIRST2 response andx overflow attempt", Jason Haar, 18:10
[Snort-sigs] FPs for NETBIOS DCERPC ISystemActivator path overflow attempt little endian,Sig ID,3197, Russell Fulton, 17:20
Re: [Snort-sigs] FP 100000122 mod_jrun, Chich Thierry, 07:14
[Snort-sigs] FP for 2001621 (PHP Injection Attack), Chich Thierry, 07:14
[Snort-sigs] FP 100000122 mod_jrun, Chich Thierry, 06:13

November 20, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:20

November 19, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:21
[Snort-sigs] new rule for detect smtp open relay test message, rmkml, 08:05

November 18, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:21
Re: [Snort-sigs] new rule for detect IMAP Qualcomm WorldMail SELECT dot dot attempt, Blake Hartstein, 13:26
[Snort-sigs] new rule for detect IMAP Qualcomm WorldMail SELECT dot dot attempt, rmkml, 08:44
Re: [Snort-users] Changing the Community sid-msg.map, Richard Harman, 00:32

November 17, 2005

[Snort-sigs] Confirmed Coverage for MSRPC UPnP DoS, Sourcefire VRT, 20:40
[Snort-sigs] Changing the Community sid-msg.map, Alex Kirk, 13:31

November 16, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:24
[Snort-sigs] Snort Community Rules Update, Sourcefire VRT, 13:27
[Snort-sigs] new rule for detect gnu mailman utf8 attachement, rmkml, 09:15
[Snort-sigs] Three new rule for detect Wizz Forum sql attempt, rmkml, 06:54

November 15, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 22:30
Re: [Snort-sigs] new rule for detect phpSysInfo vulnerabilities (HTTP_ACCEPT_LANGUAGE), Nigel Houghton, 17:58
[Snort-sigs] new rule for detect phpSysInfo vulnerabilities (HTTP_ACCEPT_LANGUAGE), rmkml, 15:26

November 14, 2005

[Snort-sigs] Snort Community Rules Update, Sourcefire VRT, 15:47
Re: [Snort-sigs] Two rules detecting video streams, Chich Thierry, 12:25
Re: [Snort-sigs] Two rules detecting video streams, Alex Kirk, 12:05
[Snort-sigs] Two rules detecting video streams, Chich Thierry, 10:24

November 13, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 19:51
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 19:50
[Snort-sigs] Snort Community Rules Update, Sourcefire VRT, 19:49
Re: [Snort-sigs] new rule for detect SAP WAS syscmd access, Frank Knobbe, 19:48
Re: [Snort-sigs] new rule for detect SAP WAS syscmd access, rmkml, 19:48
Re: [Snort-sigs] new rule for detect SAP WAS syscmd access, Frank Knobbe, 19:48
[Snort-sigs] new rule for detect SAP WAS syscmd access, rmkml, 19:48
[Snort-sigs] new rule for detect Cross-Site Scripting php attempt, rmkml, 19:48
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 19:48
[Snort-sigs] Sourcefire VRT Certified Rules Update, Sourcefire VRT, 19:47
[Snort-sigs] new rule for detect apache (1.3/2.0) dir browsing|list, rmkml, 19:47
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 19:46
[Snort-sigs] VRT Advisory - Confirmed Coverage for Lupper/Plupii Worm, Sourcefire VRT, 19:46
[Snort-sigs] new rule for detect JBoss JMXInvokerServlet access, rmkml, 19:46
Re: [Snort-sigs] new rule for detect Vubb Path disclosure, Alex Kirk, 19:44
[Snort-sigs] mail from snort to administrator ?, Zahra Taghikhaki, 19:43
[Snort-sigs] new rule for detect Vubb Path disclosure, rmkml, 19:43
[Snort-sigs] new rule for detect "Sip Send Fun" (tool to exploit VoIP) and other, rmkml, 19:43

November 04, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:45
[Snort-sigs] new rule for detect FlatFrag game DoS exploit, rmkml, 19:43
[Snort-sigs] new rule for detect phpinfo access !, rmkml, 19:02
[Snort-sigs] new rule for detect Battle Carry Dos, rmkml, 18:12
Re: [Snort-sigs] FP on "NETBIOS SMB spoolss AddPrinterEx WriteAndX unicode overflow attempt", Brian Caswell, 16:21
[Snort-sigs] FP for psyBNC - sig 493, Chris Edwards, 10:28
Re: [Snort-sigs] FP on "NETBIOS SMB spoolss AddPrinterEx WriteAndX unicode overflow attempt", Jason Haar, 00:03

November 03, 2005

[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 23:43
[Snort-sigs] FP on "NETBIOS SMB spoolss AddPrinterEx WriteAndX unicode overflow attempt", Jason Haar, 20:41
[Snort-sigs] Snort Community Rules Update, Sourcefire VRT, 17:08
[Snort-sigs] Bleedingsnort.com Daily Update, bleeding, 17:07

November 01, 2005

Re: [Snort-sigs] i want to update my snort rules but i don't know how can i do?, Jack Pepper, 11:44
RE: [Snort-sigs] add cert on reference.config file ?, Michael Scheidell, 11:44
Re: [Snort-sigs] Rebuilding snort server and sensors, Charles Lacroix, 11:14
[Snort-sigs] Sig ID 3000, lanceb, 11:14