Sourcefire VRT Rules Update

Date: 2008-12-11

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack for Snort version 2.7.

The format of the file is:

sid - Message (rule group)

New rules:
15135 <-> NETBIOS-DG SMB sp_replwritetovarbin vulnerable function WriteAndX andx attempt (netbios.rules, High)
15136 <-> NETBIOS-DG SMB sp_replwritetovarbin vulnerable function WriteAndX attempt (netbios.rules, High)
15137 <-> NETBIOS-DG SMB sp_replwritetovarbin vulnerable function WriteAndX unicode andx attempt (netbios.rules, High)
15138 <-> NETBIOS-DG SMB sp_replwritetovarbin vulnerable function WriteAndX unicode attempt (netbios.rules, High)
15139 <-> NETBIOS-DG SMB sp_replwritetovarbin vulnerable function andx attempt (netbios.rules, High)
15140 <-> NETBIOS-DG SMB sp_replwritetovarbin vulnerable function attempt (netbios.rules, High)
15141 <-> NETBIOS-DG SMB sp_replwritetovarbin vulnerable function unicode andx attempt (netbios.rules, High)
15142 <-> NETBIOS-DG SMB sp_replwritetovarbin vulnerable function unicode attempt (netbios.rules, High)
15143 <-> SQL sp_replwritetovarbin unicode vulnerable function attempt (sql.rules, High)
15144 <-> SQL sp_replwritetovarbin vulnerable function attempt (sql.rules, High)