Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Snort-Signatures
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

[Snort-sigs] Snort Community Rules Update

from [Sourcefire VRT] Network Security [Permanent Link]
Subject: [Snort-sigs] Snort Community Rules Update
Date: Wed, 16 Nov 2005 11:02:17 -0500
This message is to announce the availability of an update for the Sourcefire community rule set, which can be downloaded free of cost or registration from http://www.snort.org/pub-bin/downloads.cgi.

New rules in this release are identified as SIDs 100000191-100000195. These rules detect SQL injection attempts against the Wizz web forum, a denial of service attack against the GNU Mailman mailing list server, and arbitrary file inclusion attacks against PHP-enabled web servers.

Sourcefire would like to thank rmkml for submitting these rules. As a reminder, anyone who wishes to submit rules may do so at http://www.snort.org/reg-bin/rulesubmit.cgi.

A list of new rules and their SIDs follows.

Alex Kirk
Community Rules Maintainer
Sourcefire, Inc.

100000191 || COMMUNITY SMTP Gnu Mailman utf8 attachement access
100000192 || COMMUNITY SQL-INJECTION WIZZ ForumTopicDetails Sql Injection attempt
100000193 || COMMUNITY SQL-INJECTION WIZZ ForumAuthDetails Sql Injection attempt
100000194 || COMMUNITY SQL-INJECTION WIZZ ForumReply Sql Injection attempt
100000195 || COMMUNITY WEB-PHP _SERVER HTTP_ACCEPT_LANGUAGE access


-------------------------------------------------------
This SF.Net email is sponsored by the JBoss Inc.  Get Certified Today
Register for a JBoss Training Course.  Free Certification Exam
for All Training Attendees Through End of 2005. For more info visit:
http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs

[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  [Snort-sigs] new rule for detect gnu mailman utf8 attachement, rmkml
Next by Date:  [Snort-sigs] Bleedingsnort.com Daily Update, bleeding
Previous by Thread:  [Snort-sigs] Snort Community Rules Update, Sourcefire VRT
Next by Thread:  [Snort-sigs] FP on "NETBIOS SMB spoolss AddPrinterEx WriteAndX unicode overflow attempt", Jason Haar
Indexes:  [Date] [Thread] [Top] [All Lists]