Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Snort-Signatures
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

[Snort-sigs] Snort Community Rules Update

from [Sourcefire VRT] Network Security [Permanent Link]
Subject: [Snort-sigs] Snort Community Rules Update
Date: Tue, 11 Apr 2006 14:40:59 -0400
This message is to announce the availability of an update for the Sourcefire community rule set, which can be downloaded free of cost or registration from http://www.snort.org/pub-bin/downloads.cgi.

This update includes a new rule to detect .wab (Windows Address Book) file downloads, which according to Microsoft Security Bulletin MS06-016 may contain malicious code. Additionally, SID 100000238 has been updated to provide more efficient detection, and SIDs 100000238 and 100000239 have updated references to account for new MS numbers.

A list of modified rules and their SIDs follows.

Alex Kirk
Community Rules Maintainer
Sourcefire, Inc.

100000238 || COMMUNITY WEB-CLIENT Internet Explorer mulitple event handler heap overflow attempt
100000239 || COMMUNITY WEB-CLIENT IE createTextRange overflow attempt
100000279 || COMMUNITY SMTP Incoming WAB attachment


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs

[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  [Snort-sigs] gator rule? 'pure not rule'?, Michael Scheidell
Next by Date:  Re: [Snort-sigs] gator rule? 'pure not rule'?, Alex Kirk
Previous by Thread:  [Snort-sigs] Snort Community Rules Update, Sourcefire VRT
Next by Thread:  [Snort-sigs] Snort Community Rules Update, Sourcefire VRT
Indexes:  [Date] [Thread] [Top] [All Lists]