Snort :: Changes 2010-12-20

Sourcefire VRT Rules Update

Date: 2010-12-20

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack for Snort version 2.8.6.1.

The format of the file is:

sid - Message (rule group, priority)

New rules:
18239 <-> WEB-CLIENT known malicious JavaScript decryption routine (web-client.rules, High)

Updated rules:
16606 <-> ORACLE BEA WebLogic Server Plug-ins Certificate overflow attempt (oracle.rules, High)
18228 <-> DELETED WEB-MISC Microsoft FlashPix file download (deleted.rules, Low)
18232 <-> DELETED WEB-MISC Microsoft OpenType Font file download (deleted.rules, Low)