-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Sourcefire VRT Certified Snort Rules Update
Synopsis:
This release contains a fix for a problem that caused the rule for
MS08-037 to generate false positive events. This release also contains multiple
rules in the spyware-put and backdoor categories to provide coverage for
emerging spyware and backdoor threats.
Details:
Microsoft Security Advisory (MS08-037):
Microsoft Windows DNS client and server are prone to a DNS spoofing
vulnerability that may allow an attacker to redirect network traffic.
A rule to detect attacks targeting this vulnerability was previously released.
A modified version that reduces false positive events is included in this
release and is identified with GID 3 and SID 13887.
As a result of ongoing research, the Sourcefire VRT has added multiple rules to
the spyware-put and backdoor rule sets to provide coverage for emerging threats
from these technologies.
For a complete list of new and modified rules please see:
http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2008-07-11.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
iD8DBQFId7RI8GAEVQeoGrMRAoL1AKCKmtEH+zsISSsx43B6VtKLnZdZggCfXUde
fYF2NsYpczbPsSo+gUxC1Ro=
=9x3J
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
