-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Sourcefire VRT Certified Rules Update
Synopsis:
The Sourcefire VRT is aware of vulnerabilities affecting Microsoft DNS
Server Service, Microsoft Exchange Server, Microsoft CAPICOM, Microsoft
Internet Explorer and Microsoft Excel.
Details:
Microsoft Security Bulletin MS07-029
Microsoft DNS Server Service is prone to a vulnerability that may allow
a remote attacker to execute code on an affected system. The issue is
present in the RPC interface of servers using Microsoft's
implementation of DNS.
In order to detect attacks targeting this vulnerability, the DCE/RPC
preprocessor must be configured to use 'autodetect'. This is the
default behavior for this preprocessor.
Detection for attacks targeting this vulnerability was previously
released.
Microsoft Security Bulletin MS07-028
A vulnerability in Microsoft Cryptographic API Component Object Model
(CAPICOM) may allow a remote attacker to execute code on an affected
system.
Rules to detect attacks targeting this vulnerability are included in
this release and are identified as SIDs 11230 through 11235
Microsoft Security Bulletin MS07-027
Microsoft Internet Explorer suffers from programming errors that may
allow a remote attacker to execute code on an affected system.
Rules to detect attacks targeting this vulnerability are included in
this release and are identified as SIDs 11224 through 11229, 11247,
11248 and 11257.
Also, other rules that detect attacks targeting this vulnerability were
previously released and are identified as SIDs 9427 and 9428.
Microsoft Security Bulletin MS07-026
Microsoft Exchange Server incorrectly handles certain electronic mail
transactions. This may allow a remote attacker to execute code on an
affected system.
A rule to detect attacks targeting this vulnerability is included in
this release and is identified as SID 11222.
Additionally, a rule that also detects attacks targeting this
vulnerability was previously released and is identified as SID 2665.
Microsoft Security Bulletin MS07-023
Microsoft Excel is prone to a vulnerability that may allow a remote
attacker to execute code on an affected system.
A rule to detect attacks targeting this vulnerability is included in
this release and is identified as SID 11258.
For a complete list of new and modified rules please see:
http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2007-05-08.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFGQRksoFlcG+k7cPwRAj5BAJ471AH8/2ldGxqFgRpGS2pb3wON2wCfcbFM
CvRDADRikyWUhzgfT3CGU+A=
=fpiS
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
