-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Sourcefire VRT Certified Snort Rules Update
Synopsis:
The Sourcefire VRT is aware of vulnerabilities affecting hosts using Microsoft
Windows Active Directory and Microsoft Excel.
Details:
Microsoft Security Bulletin MS07-039:
A heap overflow vulnerability exists in the way Microsoft Windows Active
Directory handles LDAP messages. The vulnerability is due to a lack of
convertible attributes validation in client LDAP request messages. Remote
unauthenticated attackers can exploit this vulnerability to inject and execute
arbitrary code on the affected target with System level privileges.
A rule to detect attacks targeting this vulnerability is included in this
release and is identified as SID 12069.
Microsoft Security Bulletin MS07-036:
A memory corruption vulnerability exists in the way Microsoft Excel processes
files. The vulnerability is a result of insufficient data validation while
processing the Version field in a BOF record. A remote attacker can exploit
this vulnerability by enticing the target user to open a crafted Excel file,
potentially causing arbitrary code to be injected and executed in the security
context of the current user.
A rule to detect attacks targeting this vulnerability is included in this
release and is identified as SID 12070.
For a complete list of new and modified rules please see:
http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2007-07-12.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Cygwin)
iD8DBQFGlpEzoFlcG+k7cPwRAq58AJ98hNZZzX3xobLh377Nn89FbuOO+QCfWjU0
zSZtQOBUetB+hHdaRVosyMM=
=kQdb
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
