This message is to announce the availability of an update for the Sourcefire
community rule set, which can be downloaded free of cost or registration from
http://www.snort.org/pub-bin/downloads.cgi.
New rules in this release are identified as SIDs 100000920-100000922. These
rules cover remote file inclusion attacks against the MiniBB and PunBB systems,
as well as a SQL injection attack against the Etomite system. Additionally,
references have been updated for SID 100000919.
Sourcefire would like to thank J.M. Seitz (jms@bughunter.ca) for submitting
both the new rules and the reference updates. As a reminder, anyone who wishes
to submit rules may do so at http://www.snort.org/reg-bin/rulesubmit.cgi.
A list of modified rules and their SIDs follows.
Alex Kirk
Community Rules Maintainer
Sourcefire, Inc.
100000919 || COMMUNITY WEB-PHP Segue CMS themesettings.inc.php remote file
include attempt
100000920 || COMMUNITY WEB-PHP MiniBB bb_func_txt.php pathToFiles variable
remote file include
100000921 || COMMUNITY WEB-PHP PunBB register.php language variable remote file
include
100000922 || COMMUNITY WEB-PHP Etomite CMS index.php id variable SQL injection
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
