This message is to announce the availability of an update for the Sourcefire
community rule set, which can be downloaded free of cost or registration from
http://www.snort.org/pub-bin/downloads.cgi.
New rules in this release are identified as SIDs 100000892-100000899. These
rules cover detection of the Weather Channel Desktop application, which may be
policy violations in some environments; a Q.931 buffer overflow attack; and
cross-site scripting attacks against the Blojsom Weblog system.
Sourcefire would like to thank Avinash Shenoi of the Cenzic Inc. CIA Research
team for submitting SIDs 100000895-100000899. As a reminder, anyone who wishes
to submit rules may do so at http://www.snort.org/reg-bin/rulesubmit.cgi.
A list of modified rules and their SIDs follows.
Alex Kirk
Community Rules Maintainer
Sourcefire, Inc.
100000892 || COMMUNITY MISC Q.931 Invalid Call Reference Length Buffer Overflow
100000893 || COMMUNITY POLICY Weather Channel Desktop App Installer
100000894 || COMMUNITY POLICY Weather Channel Desktop App
100000895 || COMMUNITY WEB-MISC Blojsom Weblog blog-category-description xss
attempt
100000896 || COMMUNITY WEB-MISC Blojsom Weblog blog-entry-title xss attempt
100000897 || COMMUNITY WEB-MISC Blojsom Weblog rss-enclosure-url xss attempt
100000898 || COMMUNITY WEB-MISC Blojsom Weblog technorati-tags xss attempt
100000899 || COMMUNITY WEB-MISC Blojsom Weblog blog-category-name xss attempt
<http://www.snort.org/rules/docs/ruleset_changelogs/community/changes-2006-09-05.html>
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
