This message is to announce the availability of an update for the
Sourcefire community rule set, which can be downloaded free of cost or
registration from http://www.snort.org/pub-bin/downloads.cgi.
New rules in this release are identified as SIDs 100000175-100000179.
They cover buffer overflow attacks against the the Ethereal slimp
decoder, the HPUX lpd daemon, and the Linksys router apply.cgi script,
as well as a denial of service against the Hasbani-WindWeb system and
detection of HTTP TRACE commands, which may be used for information
gathering under certain circumstances.
Sourcefire would like to thank rmkml for submitting these rules. As a
reminder, anyone who wishes to submit rules may do so at
http://www.snort.org/reg-bin/rulesubmit.cgi.
A list of new rules and their SIDs follows.
Alex Kirk
Community Rules Maintainer
Sourcefire, Inc.
100000175 || COMMUNITY DOS Ethereal slimp overflow attempt
100000176 || COMMUNITY EXPLOIT HPUX LPD overflow attempt
100000177 || COMMUNITY WEB-MISC Linksys apply.cgi overflow attempt
100000178 || COMMUNITY WEB-MISC Hasbani-WindWeb GET DoS attempt
100000179 || COMMUNITY WEB-MISC SMC TRACE access
-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
