Sourcefire VRT Rules Update

Date: 2011-04-27

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack for Snort version 2.9.0.5.

The format of the file is:

gid:sid <-> Default rule state <-> Message (rule group)

New Rules:


Modified Rules:


 * 3:18676 <-> ENABLED <-> WEB-CLIENT WEB-CLIENT Microsoft Office Excel DV record buffer overflow attempt (web-client.rules)
 * 3:17665 <-> ENABLED <-> WEB-CLIENT OpenOffice Word document table parsing multiple heap based buffer overflow attempt (web-client.rules)