Snort

Sourcefire VRT Rules Update

Date: 2008-10-23

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack for Snort version 2.8.

The format of the file is:

sid - Message (rule group)

New Rules:
    14985 <-> NETBIOS-DG SMB v4 srvsvc NetrpPathCononicalize unicode path cononicalization stack overflow attempt (netbios.rules)
    14984 <-> NETBIOS-DG SMB v4 srvsvc NetrpPathCononicalize unicode little endian path cononicalization stack overflow attempt (netbios.rules)
    14983 <-> NETBIOS-DG SMB v4 srvsvc NetrpPathCononicalize unicode little endian andx path cononicalization stack overflow attempt (netbios.rules)
    14982 <-> NETBIOS-DG SMB v4 srvsvc NetrpPathCononicalize unicode andx path cononicalization stack overflow attempt (netbios.rules)
    14981 <-> NETBIOS-DG SMB v4 srvsvc NetrpPathCononicalize path cononicalization stack overflow attempt (netbios.rules)
    14980 <-> NETBIOS-DG SMB v4 srvsvc NetrpPathCononicalize little endian path cononicalization stack overflow attempt (netbios.rules)
    14979 <-> NETBIOS-DG SMB v4 srvsvc NetrpPathCononicalize little endian andx path cononicalization stack overflow attempt (netbios.rules)
    14978 <-> NETBIOS-DG SMB v4 srvsvc NetrpPathCononicalize andx path cononicalization stack overflow attempt (netbios.rules)
    14977 <-> NETBIOS-DG SMB v4 srvsvc NetrpPathCononicalize WriteAndX unicode path cononicalization stack overflow attempt (netbios.rules)
    14976 <-> NETBIOS-DG SMB v4 srvsvc NetrpPathCononicalize WriteAndX unicode little endian path cononicalization stack overflow attempt (netbios.rules)
    14975 <-> NETBIOS-DG SMB v4 srvsvc NetrpPathCononicalize WriteAndX unicode little endian andx path cononicalization stack overflow attempt (netbios.rules)
    14974 <-> NETBIOS-DG SMB v4 srvsvc NetrpPathCononicalize WriteAndX unicode andx path cononicalization stack overflow attempt (netbios.rules)
    14973 <-> NETBIOS-DG SMB v4 srvsvc NetrpPathCononicalize WriteAndX path cononicalization stack overflow attempt (netbios.rules)
    14972 <-> NETBIOS-DG SMB v4 srvsvc NetrpPathCononicalize WriteAndX little endian path cononicalization stack overflow attempt (netbios.rules)
    14971 <-> NETBIOS-DG SMB v4 srvsvc NetrpPathCononicalize WriteAndX little endian andx path cononicalization stack overflow attempt (netbios.rules)
    14970 <-> NETBIOS-DG SMB v4 srvsvc NetrpPathCononicalize WriteAndX andx path cononicalization stack overflow attempt (netbios.rules)
    14969 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize unicode path cononicalization stack overflow attempt (netbios.rules)
    14968 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize unicode object call path cononicalization stack overflow attempt (netbios.rules)
    14967 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize unicode little endian path cononicalization stack overflow attempt (netbios.rules)
    14966 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize unicode little endian object call path cononicalization stack overflow attempt (netbios.rules)
    14965 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize unicode little endian andx path cononicalization stack overflow attempt (netbios.rules)
    14964 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize unicode little endian andx object call path cononicalization stack overflow attempt (netbios.rules)
    14963 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize unicode andx path cononicalization stack overflow attempt (netbios.rules)
    14962 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize unicode andx object call path cononicalization stack overflow attempt (netbios.rules)
    14961 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize path cononicalization stack overflow attempt (netbios.rules)
    14960 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize object call path cononicalization stack overflow attempt (netbios.rules)
    14959 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize little endian path cononicalization stack overflow attempt (netbios.rules)
    14958 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize little endian object call path cononicalization stack overflow attempt (netbios.rules)
    14957 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize little endian andx path cononicalization stack overflow attempt (netbios.rules)
    14956 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize little endian andx object call path cononicalization stack overflow attempt (netbios.rules)
    14955 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize andx path cononicalization stack overflow attempt (netbios.rules)
    14954 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize andx object call path cononicalization stack overflow attempt (netbios.rules)
    14953 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize WriteAndX unicode path cononicalization stack overflow attempt (netbios.rules)
    14952 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize WriteAndX unicode object call path cononicalization stack overflow attempt (netbios.rules)
    14951 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize WriteAndX unicode little endian path cononicalization stack overflow attempt (netbios.rules)
    14950 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize WriteAndX unicode little endian object call path cononicalization stack overflow attempt (netbios.rules)
    14949 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize WriteAndX unicode little endian andx path cononicalization stack overflow attempt (netbios.rules)
    14948 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize WriteAndX unicode little endian andx object call path cononicalization stack overflow attempt (netbios.rules)
    14947 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize WriteAndX unicode andx path cononicalization stack overflow attempt (netbios.rules)
    14946 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize WriteAndX unicode andx object call path cononicalization stack overflow attempt (netbios.rules)
    14945 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize WriteAndX path cononicalization stack overflow attempt (netbios.rules)
    14944 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize WriteAndX object call path cononicalization stack overflow attempt (netbios.rules)
    14943 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize WriteAndX little endian path cononicalization stack overflow attempt (netbios.rules)
    14942 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize WriteAndX little endian object call path cononicalization stack overflow attempt (netbios.rules)
    14941 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize WriteAndX little endian andx path cononicalization stack overflow attempt (netbios.rules)
    14940 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize WriteAndX little endian andx object call path cononicalization stack overflow attempt (netbios.rules)
    14939 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize WriteAndX andx path cononicalization stack overflow attempt (netbios.rules)
    14938 <-> NETBIOS-DG SMB srvsvc NetrpPathCononicalize WriteAndX andx object call path cononicalization stack overflow attempt (netbios.rules)
    14937 <-> NETBIOS DCERPC NCADG-IP-UDP v4 srvsvc NetrpPathCononicalize path cononicalization stack overflow attempt (netbios.rules)
    14936 <-> NETBIOS DCERPC NCADG-IP-UDP v4 srvsvc NetrpPathCononicalize little endian path cononicalization stack overflow attempt (netbios.rules)
    14935 <-> NETBIOS DCERPC NCADG-IP-UDP srvsvc NetrpPathCononicalize path cononicalization stack overflow attempt (netbios.rules)
    14934 <-> NETBIOS DCERPC NCADG-IP-UDP srvsvc NetrpPathCononicalize object call path cononicalization stack overflow attempt (netbios.rules)
    14933 <-> NETBIOS DCERPC NCADG-IP-UDP srvsvc NetrpPathCononicalize little endian path cononicalization stack overflow attempt (netbios.rules)
    14932 <-> NETBIOS DCERPC NCADG-IP-UDP srvsvc NetrpPathCononicalize little endian object call path cononicalization stack overflow attempt (netbios.rules)
    14931 <-> NETBIOS DCERPC DIRECT-UDP v4 srvsvc NetrpPathCononicalize path cononicalization stack overflow attempt (netbios.rules)
    14930 <-> NETBIOS DCERPC DIRECT-UDP v4 srvsvc NetrpPathCononicalize little endian path cononicalization stack overflow attempt (netbios.rules)
    14929 <-> NETBIOS DCERPC DIRECT-UDP srvsvc NetrpPathCononicalize path cononicalization stack overflow attempt (netbios.rules)
    14928 <-> NETBIOS DCERPC DIRECT-UDP srvsvc NetrpPathCononicalize object call path cononicalization stack overflow attempt (netbios.rules)
    14927 <-> NETBIOS DCERPC DIRECT-UDP srvsvc NetrpPathCononicalize little endian path cononicalization stack overflow attempt (netbios.rules)
    14926 <-> NETBIOS DCERPC DIRECT-UDP srvsvc NetrpPathCononicalize little endian object call path cononicalization stack overflow attempt (netbios.rules)
    14925 <-> NETBIOS SMB v4 srvsvc NetrpPathCononicalize unicode path cononicalization stack overflow attempt (netbios.rules)
    14924 <-> NETBIOS SMB v4 srvsvc NetrpPathCononicalize unicode little endian path cononicalization stack overflow attempt (netbios.rules)
    14923 <-> NETBIOS SMB v4 srvsvc NetrpPathCononicalize unicode little endian andx path cononicalization stack overflow attempt (netbios.rules)
    14922 <-> NETBIOS SMB v4 srvsvc NetrpPathCononicalize unicode andx path cononicalization stack overflow attempt (netbios.rules)
    14921 <-> NETBIOS SMB v4 srvsvc NetrpPathCononicalize path cononicalization stack overflow attempt (netbios.rules)
    14920 <-> NETBIOS SMB v4 srvsvc NetrpPathCononicalize little endian path cononicalization stack overflow attempt (netbios.rules)
    14919 <-> NETBIOS SMB v4 srvsvc NetrpPathCononicalize little endian andx path cononicalization stack overflow attempt (netbios.rules)
    14918 <-> NETBIOS SMB v4 srvsvc NetrpPathCononicalize andx path cononicalization stack overflow attempt (netbios.rules)
    14917 <-> NETBIOS SMB v4 srvsvc NetrpPathCononicalize WriteAndX unicode path cononicalization stack overflow attempt (netbios.rules)
    14916 <-> NETBIOS SMB v4 srvsvc NetrpPathCononicalize WriteAndX unicode little endian path cononicalization stack overflow attempt (netbios.rules)
    14915 <-> NETBIOS SMB v4 srvsvc NetrpPathCononicalize WriteAndX unicode little endian andx path cononicalization stack overflow attempt (netbios.rules)
    14914 <-> NETBIOS SMB v4 srvsvc NetrpPathCononicalize WriteAndX unicode andx path cononicalization stack overflow attempt (netbios.rules)
    14913 <-> NETBIOS SMB v4 srvsvc NetrpPathCononicalize WriteAndX path cononicalization stack overflow attempt (netbios.rules)
    14912 <-> NETBIOS SMB v4 srvsvc NetrpPathCononicalize WriteAndX little endian path cononicalization stack overflow attempt (netbios.rules)
    14911 <-> NETBIOS SMB v4 srvsvc NetrpPathCononicalize WriteAndX little endian andx path cononicalization stack overflow attempt (netbios.rules)
    14910 <-> NETBIOS SMB v4 srvsvc NetrpPathCononicalize WriteAndX andx path cononicalization stack overflow attempt (netbios.rules)
    14909 <-> NETBIOS SMB srvsvc NetrpPathCononicalize unicode path cononicalization stack overflow attempt (netbios.rules)
    14908 <-> NETBIOS SMB srvsvc NetrpPathCononicalize unicode object call path cononicalization stack overflow attempt (netbios.rules)
    14907 <-> NETBIOS SMB srvsvc NetrpPathCononicalize unicode little endian path cononicalization stack overflow attempt (netbios.rules)
    14906 <-> NETBIOS SMB srvsvc NetrpPathCononicalize unicode little endian object call path cononicalization stack overflow attempt (netbios.rules)
    14905 <-> NETBIOS SMB srvsvc NetrpPathCononicalize unicode little endian andx path cononicalization stack overflow attempt (netbios.rules)
    14904 <-> NETBIOS SMB srvsvc NetrpPathCononicalize unicode little endian andx object call path cononicalization stack overflow attempt (netbios.rules)
    14903 <-> NETBIOS SMB srvsvc NetrpPathCononicalize unicode andx path cononicalization stack overflow attempt (netbios.rules)
    14902 <-> NETBIOS SMB srvsvc NetrpPathCononicalize unicode andx object call path cononicalization stack overflow attempt (netbios.rules)
    14901 <-> NETBIOS SMB srvsvc NetrpPathCononicalize path cononicalization stack overflow attempt (netbios.rules)
    14900 <-> NETBIOS SMB srvsvc NetrpPathCononicalize object call path cononicalization stack overflow attempt (netbios.rules)
    14899 <-> NETBIOS SMB srvsvc NetrpPathCononicalize little endian path cononicalization stack overflow attempt (netbios.rules)
    14898 <-> NETBIOS SMB srvsvc NetrpPathCononicalize little endian object call path cononicalization stack overflow attempt (netbios.rules)
    14897 <-> NETBIOS SMB srvsvc NetrpPathCononicalize little endian andx path cononicalization stack overflow attempt (netbios.rules)
    14896 <-> NETBIOS SMB srvsvc NetrpPathCononicalize little endian andx object call path cononicalization stack overflow attempt (netbios.rules)
    14895 <-> NETBIOS SMB srvsvc NetrpPathCononicalize andx path cononicalization stack overflow attempt (netbios.rules)
    14894 <-> NETBIOS SMB srvsvc NetrpPathCononicalize andx object call path cononicalization stack overflow attempt (netbios.rules)
    14893 <-> NETBIOS SMB srvsvc NetrpPathCononicalize WriteAndX unicode path cononicalization stack overflow attempt (netbios.rules)
    14892 <-> NETBIOS SMB srvsvc NetrpPathCononicalize WriteAndX unicode object call path cononicalization stack overflow attempt (netbios.rules)
    14891 <-> NETBIOS SMB srvsvc NetrpPathCononicalize WriteAndX unicode little endian path cononicalization stack overflow attempt (netbios.rules)
    14890 <-> NETBIOS SMB srvsvc NetrpPathCononicalize WriteAndX unicode little endian object call path cononicalization stack overflow attempt (netbios.rules)
    14889 <-> NETBIOS SMB srvsvc NetrpPathCononicalize WriteAndX unicode little endian andx path cononicalization stack overflow attempt (netbios.rules)
    14888 <-> NETBIOS SMB srvsvc NetrpPathCononicalize WriteAndX unicode little endian andx object call path cononicalization stack overflow attempt (netbios.rules)
    14887 <-> NETBIOS SMB srvsvc NetrpPathCononicalize WriteAndX unicode andx path cononicalization stack overflow attempt (netbios.rules)
    14886 <-> NETBIOS SMB srvsvc NetrpPathCononicalize WriteAndX unicode andx object call path cononicalization stack overflow attempt (netbios.rules)
    14885 <-> NETBIOS SMB srvsvc NetrpPathCononicalize WriteAndX path cononicalization stack overflow attempt (netbios.rules)
    14884 <-> NETBIOS SMB srvsvc NetrpPathCononicalize WriteAndX object call path cononicalization stack overflow attempt (netbios.rules)
    14883 <-> NETBIOS SMB srvsvc NetrpPathCononicalize WriteAndX little endian path cononicalization stack overflow attempt (netbios.rules)
    14882 <-> NETBIOS SMB srvsvc NetrpPathCononicalize WriteAndX little endian object call path cononicalization stack overflow attempt (netbios.rules)
    14881 <-> NETBIOS SMB srvsvc NetrpPathCononicalize WriteAndX little endian andx path cononicalization stack overflow attempt (netbios.rules)
    14880 <-> NETBIOS SMB srvsvc NetrpPathCononicalize WriteAndX little endian andx object call path cononicalization stack overflow attempt (netbios.rules)
    14879 <-> NETBIOS SMB srvsvc NetrpPathCononicalize WriteAndX andx path cononicalization stack overflow attempt (netbios.rules)
    14878 <-> NETBIOS SMB srvsvc NetrpPathCononicalize WriteAndX andx object call path cononicalization stack overflow attempt (netbios.rules)
    14877 <-> NETBIOS DCERPC NCACN-IP-TCP v4 srvsvc NetrpPathCononicalize path cononicalization stack overflow attempt (netbios.rules)
    14876 <-> NETBIOS DCERPC NCACN-IP-TCP v4 srvsvc NetrpPathCononicalize little endian path cononicalization stack overflow attempt (netbios.rules)
    14875 <-> NETBIOS DCERPC NCACN-IP-TCP srvsvc NetrpPathCononicalize path cononicalization stack overflow attempt (netbios.rules)
    14874 <-> NETBIOS DCERPC NCACN-IP-TCP srvsvc NetrpPathCononicalize object call path cononicalization stack overflow attempt (netbios.rules)
    14873 <-> NETBIOS DCERPC NCACN-IP-TCP srvsvc NetrpPathCononicalize little endian path cononicalization stack overflow attempt (netbios.rules)
    14872 <-> NETBIOS DCERPC NCACN-IP-TCP srvsvc NetrpPathCononicalize little endian object call path cononicalization stack overflow attempt (netbios.rules)
    14772 <-> WEB-CLIENT libpng malformed chunk denial of service attempt (netbios.rules)