-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Sourcefire VRT Certified Rules Update
Synopsis:
The VRT has continued research into vulnerabilities affecting the
Microsoft Operating System and has introduced new rules and modified
existing rules to provide coverage for exploitation attempts targeting
these vulnerabilities.
Details:
Microsoft Security Bulletin MS06-068:
A vulnerability in the way that the Microsoft Agent handles .acf files
may allow a remote attacker to execute code on an affected system. The
code will be executed with the permissions of the current user who may
have administrative privileges.
Rules to detect attacks targeting this vulnerability are included in
this release and are identified as SIDs 9432 and 9433.
3Com TFTP Service CVE-2006-6183:
The 3Com TFTP Service suffers from multiple buffer overflow
vulnerabilities. A remote attacker may be able to cause a Denial of
Service (DoS) or execute code of their choosing on an affected system
by supplying excess data in a GET or PUT command to the service.
A rule to detect attacks targeting this vulnerability is included in
this release and is identified as SID 9621.
Microsoft Security Bulletin MS03-026:
After continuing research into a vulnerability affecting Microsoft RPC,
the VRT has modified a number of existing rules and introduced new
rules to reduce false positive events and to provide greater coverage
for possible additional attack vectors.
Rules to detect attacks targeting this vulnerability are included in
this release and are identified as SIDs 9447 through 9618.
For a complete list of new and modified rules please see:
http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2006-11-16.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (Darwin)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFFeK+dMpm0ve0NhMcRAqrOAJ9Ijf2N4e6arqRqVYOe6wtOghR64wCdHRqf
/vUXzqmTKnuk6qgFe+DI0Rc=
=kOyw
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
