Sourcefire VRT Rules Update
Date: 2009-07-14
This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack for Snort version 2.8.
The format of the file is:
sid - Message (rule group, priority)
New rules: 15684 <-> MISC Microsoft Windows ShellExecute and IE7 snews url handling code execution attempt (misc.rules, High) Updated rules: 7102 <-> DELETED BACKDOOR gwboy 0.92 runtime detection (deleted.rules, High) 7103 <-> BACKDOOR gwboy 0.92 runtime detection - init connection (backdoor.rules, High) 13269 <-> MISC Microsoft Windows ShellExecute and IE7 nntp url handling code execution attempt (misc.rules, High) 13270 <-> MISC Microsoft Windows ShellExecute and IE7 news url handling code execution attempt (misc.rules, High) 13271 <-> MISC Microsoft Windows ShellExecute and IE7 telnet url handling code execution attempt (misc.rules, High) 13272 <-> MISC Microsoft Windows ShellExecute and IE7 mailto url handling code execution attempt (misc.rules, High) 15588 <-> WEB-ACTIVEX Microsoft Video 1 ActiveX clsid access (web-activex.rules, High) 15589 <-> WEB-ACTIVEX Microsoft Video 1 ActiveX clsid unicode access (web-activex.rules, High) 15590 <-> WEB-ACTIVEX Microsoft Video 10 ActiveX clsid access (web-activex.rules, High) 15591 <-> WEB-ACTIVEX Microsoft Video 10 ActiveX clsid unicode access (web-activex.rules, High) 15592 <-> WEB-ACTIVEX Microsoft Video 11 ActiveX clsid access (web-activex.rules, High) 15593 <-> WEB-ACTIVEX Microsoft Video 11 ActiveX clsid unicode access (web-activex.rules, High) 15594 <-> WEB-ACTIVEX Microsoft Video 12 ActiveX clsid access (web-activex.rules, High) 15595 <-> WEB-ACTIVEX Microsoft Video 12 ActiveX clsid unicode access (web-activex.rules, High) 15596 <-> WEB-ACTIVEX Microsoft Video 13 ActiveX clsid access (web-activex.rules, High) 15597 <-> WEB-ACTIVEX Microsoft Video 13 ActiveX clsid unicode access (web-activex.rules, High) 15598 <-> WEB-ACTIVEX Microsoft Video 14 ActiveX clsid access (web-activex.rules, High) 15599 <-> WEB-ACTIVEX Microsoft Video 14 ActiveX clsid unicode access (web-activex.rules, High) 15600 <-> WEB-ACTIVEX Microsoft Video 15 ActiveX clsid access (web-activex.rules, High) 15601 <-> WEB-ACTIVEX Microsoft Video 15 ActiveX clsid unicode access (web-activex.rules, High) 15602 <-> WEB-ACTIVEX Microsoft Video 16 ActiveX clsid access (web-activex.rules, High) 15603 <-> WEB-ACTIVEX Microsoft Video 16 ActiveX clsid unicode access (web-activex.rules, High) 15604 <-> WEB-ACTIVEX Microsoft Video 17 ActiveX clsid access (web-activex.rules, High) 15605 <-> WEB-ACTIVEX Microsoft Video 17 ActiveX clsid unicode access (web-activex.rules, High) 15606 <-> WEB-ACTIVEX Microsoft Video 18 ActiveX clsid access (web-activex.rules, High) 15607 <-> WEB-ACTIVEX Microsoft Video 18 ActiveX clsid unicode access (web-activex.rules, High) 15608 <-> WEB-ACTIVEX Microsoft Video 19 ActiveX clsid access (web-activex.rules, High) 15609 <-> WEB-ACTIVEX Microsoft Video 19 ActiveX clsid unicode access (web-activex.rules, High) 15610 <-> WEB-ACTIVEX Microsoft Video 2 ActiveX clsid access (web-activex.rules, High) 15611 <-> WEB-ACTIVEX Microsoft Video 2 ActiveX clsid unicode access (web-activex.rules, High) 15612 <-> WEB-ACTIVEX Microsoft Video 20 ActiveX clsid access (web-activex.rules, High) 15613 <-> WEB-ACTIVEX Microsoft Video 20 ActiveX clsid unicode access (web-activex.rules, High) 15614 <-> WEB-ACTIVEX Microsoft Video 21 ActiveX clsid access (web-activex.rules, High) 15615 <-> WEB-ACTIVEX Microsoft Video 21 ActiveX clsid unicode access (web-activex.rules, High) 15616 <-> WEB-ACTIVEX Microsoft Video 22 ActiveX clsid access (web-activex.rules, High) 15617 <-> WEB-ACTIVEX Microsoft Video 22 ActiveX clsid unicode access (web-activex.rules, High) 15618 <-> WEB-ACTIVEX Microsoft Video 23 ActiveX clsid access (web-activex.rules, High) 15619 <-> WEB-ACTIVEX Microsoft Video 23 ActiveX clsid unicode access (web-activex.rules, High) 15620 <-> WEB-ACTIVEX Microsoft Video 24 ActiveX clsid access (web-activex.rules, High) 15621 <-> WEB-ACTIVEX Microsoft Video 24 ActiveX clsid unicode access (web-activex.rules, High) 15622 <-> WEB-ACTIVEX Microsoft Video 25 ActiveX clsid access (web-activex.rules, High) 15623 <-> WEB-ACTIVEX Microsoft Video 25 ActiveX clsid unicode access (web-activex.rules, High) 15624 <-> WEB-ACTIVEX Microsoft Video 26 ActiveX clsid access (web-activex.rules, High) 15625 <-> WEB-ACTIVEX Microsoft Video 26 ActiveX clsid unicode access (web-activex.rules, High) 15626 <-> WEB-ACTIVEX Microsoft Video 27 ActiveX clsid access (web-activex.rules, High) 15627 <-> WEB-ACTIVEX Microsoft Video 27 ActiveX clsid unicode access (web-activex.rules, High) 15628 <-> WEB-ACTIVEX Microsoft Video 28 ActiveX clsid access (web-activex.rules, High) 15629 <-> WEB-ACTIVEX Microsoft Video 28 ActiveX clsid unicode access (web-activex.rules, High) 15630 <-> WEB-ACTIVEX Microsoft Video 29 ActiveX clsid access (web-activex.rules, High) 15631 <-> WEB-ACTIVEX Microsoft Video 29 ActiveX clsid unicode access (web-activex.rules, High) 15632 <-> WEB-ACTIVEX Microsoft Video 3 ActiveX clsid access (web-activex.rules, High) 15633 <-> WEB-ACTIVEX Microsoft Video 3 ActiveX clsid unicode access (web-activex.rules, High) 15634 <-> WEB-ACTIVEX Microsoft Video 30 ActiveX clsid access (web-activex.rules, High) 15635 <-> WEB-ACTIVEX Microsoft Video 30 ActiveX clsid unicode access (web-activex.rules, High) 15636 <-> WEB-ACTIVEX Microsoft Video 31 ActiveX clsid access (web-activex.rules, High) 15637 <-> WEB-ACTIVEX Microsoft Video 31 ActiveX clsid unicode access (web-activex.rules, High) 15638 <-> WEB-ACTIVEX Microsoft Video 32 ActiveX clsid access (web-activex.rules, High) 15639 <-> WEB-ACTIVEX Microsoft Video 32 ActiveX clsid unicode access (web-activex.rules, High) 15640 <-> WEB-ACTIVEX Microsoft Video 33 ActiveX clsid access (web-activex.rules, High) 15641 <-> WEB-ACTIVEX Microsoft Video 33 ActiveX clsid unicode access (web-activex.rules, High) 15642 <-> WEB-ACTIVEX Microsoft Video 34 ActiveX clsid access (web-activex.rules, High) 15643 <-> WEB-ACTIVEX Microsoft Video 34 ActiveX clsid unicode access (web-activex.rules, High) 15644 <-> WEB-ACTIVEX Microsoft Video 35 ActiveX clsid access (web-activex.rules, High) 15645 <-> WEB-ACTIVEX Microsoft Video 35 ActiveX clsid unicode access (web-activex.rules, High) 15646 <-> WEB-ACTIVEX Microsoft Video 36 ActiveX clsid access (web-activex.rules, High) 15647 <-> WEB-ACTIVEX Microsoft Video 36 ActiveX clsid unicode access (web-activex.rules, High) 15648 <-> WEB-ACTIVEX Microsoft Video 37 ActiveX clsid access (web-activex.rules, High) 15649 <-> WEB-ACTIVEX Microsoft Video 37 ActiveX clsid unicode access (web-activex.rules, High) 15650 <-> WEB-ACTIVEX Microsoft Video 38 ActiveX clsid access (web-activex.rules, High) 15651 <-> WEB-ACTIVEX Microsoft Video 38 ActiveX clsid unicode access (web-activex.rules, High) 15652 <-> WEB-ACTIVEX Microsoft Video 39 ActiveX clsid access (web-activex.rules, High) 15653 <-> WEB-ACTIVEX Microsoft Video 39 ActiveX clsid unicode access (web-activex.rules, High) 15654 <-> WEB-ACTIVEX Microsoft Video 4 ActiveX clsid access (web-activex.rules, High) 15655 <-> WEB-ACTIVEX Microsoft Video 4 ActiveX clsid unicode access (web-activex.rules, High) 15656 <-> WEB-ACTIVEX Microsoft Video 40 ActiveX clsid access (web-activex.rules, High) 15657 <-> WEB-ACTIVEX Microsoft Video 40 ActiveX clsid unicode access (web-activex.rules, High) 15658 <-> WEB-ACTIVEX Microsoft Video 41 ActiveX clsid access (web-activex.rules, High) 15659 <-> WEB-ACTIVEX Microsoft Video 41 ActiveX clsid unicode access (web-activex.rules, High) 15660 <-> WEB-ACTIVEX Microsoft Video 42 ActiveX clsid access (web-activex.rules, High) 15661 <-> WEB-ACTIVEX Microsoft Video 42 ActiveX clsid unicode access (web-activex.rules, High) 15662 <-> WEB-ACTIVEX Microsoft Video 43 ActiveX clsid access (web-activex.rules, High) 15663 <-> WEB-ACTIVEX Microsoft Video 43 ActiveX clsid unicode access (web-activex.rules, High) 15664 <-> WEB-ACTIVEX Microsoft Video 44 ActiveX clsid access (web-activex.rules, High) 15665 <-> WEB-ACTIVEX Microsoft Video 44 ActiveX clsid unicode access (web-activex.rules, High) 15666 <-> WEB-ACTIVEX Microsoft Video 45 ActiveX clsid access (web-activex.rules, High) 15667 <-> WEB-ACTIVEX Microsoft Video 45 ActiveX clsid unicode access (web-activex.rules, High) 15668 <-> WEB-ACTIVEX Microsoft Video 5 ActiveX clsid access (web-activex.rules, High) 15669 <-> WEB-ACTIVEX Microsoft Video 5 ActiveX clsid unicode access (web-activex.rules, High) 15670 <-> WEB-ACTIVEX Microsoft Video 6 ActiveX clsid access (web-activex.rules, High) 15671 <-> WEB-ACTIVEX Microsoft Video 6 ActiveX clsid unicode access (web-activex.rules, High) 15672 <-> WEB-ACTIVEX Microsoft Video 7 ActiveX clsid access (web-activex.rules, High) 15673 <-> WEB-ACTIVEX Microsoft Video 7 ActiveX clsid unicode access (web-activex.rules, High) 15674 <-> WEB-ACTIVEX Microsoft Video 8 ActiveX clsid access (web-activex.rules, High) 15675 <-> WEB-ACTIVEX Microsoft Video 8 ActiveX clsid unicode access (web-activex.rules, High) 15676 <-> WEB-ACTIVEX Microsoft Video 9 ActiveX clsid access (web-activex.rules, High) 15677 <-> WEB-ACTIVEX Microsoft Video 9 ActiveX clsid unicode access (web-activex.rules, High)
