[Snort-sigs] Bleedingsnort.com Daily Update

[***] Results from Oinkmaster started Sat Dec 31 20:00:08 2005 [***]

[+++]          Added rules:          [+++]

 2002742 - EXPLOIT WMF Escape Record Exploit (bleeding.rules)


[///]     Modified active rules:     [///]

 2002741 - EXPLOIT WMF Escape Record Exploit - Web Only (bleeding.rules)


[///]    Modified inactive rules:    [///]

 2002733 - EXPLOIT WMF Escape Record Exploit - All Ports (bleeding.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-sid-msg.map (2):
        2002733 || EXPLOIT WMF Escape Record Exploit - All Ports || 
url,www.frsirt.com/english/advisories/2005/3086
        2002742 || EXPLOIT WMF Escape Record Exploit || 
url,www.frsirt.com/english/advisories/2005/3086

     -> Added to bleeding.rules (2):
        # Choose either All Ports or Web Only version. flow_depth (of 
http_inspect_server) has to be set to 0.
        # Recommend second Snort instance with that config.

[---]     Removed non-rule lines:    [---]

     -> Removed from bleeding-sid-msg.map (1):
        2002733 || EXPLOIT WMF Escape Record Exploit || 
url,www.frsirt.com/english/advisories/2005/3086



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs