Snort

Sourcefire VRT Rules Update

Date: 2010-01-15

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack for Snort version 2.8.

The format of the file is:

sid - Message (rule group, priority)

New Rules:
16367 <-> WEB-CLIENT Microsoft Internet Explorer invalid object access memory corruption attempt (web-client, High)

Updated rules:
16218 <-> WEB-MISC Content-Length request offset smuggling attempt (web-misc.rules, Medium)