Snort

Sourcefire VRT Rules Update

Date: 2008-06-05

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack for Snort version 2.6.

The format of the file is:

sid - Message (rule group)

New rules:
13838 <-> WEB-CLIENT Mozilla Firefox IFRAME style change handling code execution (web-client.rules)
13839 <-> MISC CA ARCServ NetBackup remote file upload attempt (misc.rules)
13840 <-> EXPLOIT Borland Interbase service attach operation buffer overflow (exploit.rules)
13841 <-> EXPLOIT Borland Interbase create operation buffer overflow (exploit.rules)
13842 <-> EXPLOIT Borland Interbase operation buffer overflow (exploit.rules)
13843 <-> EXPLOIT MaxDB WebDBM get buffer overflow (exploit.rules)

Updated rules:
11196 <-> EXPLOIT MaxDB WebDBM get buffer overflow (exploit.rules)