Snort

Sourcefire VRT Rules Update

Date: 2010-03-09

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack for Snort version CURRENT.

The format of the file is:

sid - Message (rule group, priority)

New rules:
16479 <-> SPECIFIC-THREATS Apache mod_isapi dangling pointer exploit attempt - public shell code (specific-threats.rules, High)
16480 <-> SPECIFIC-THREATS Apache mod_isapi dangling pointer exploit attempt (specific-threats.rules, High)
16481 <-> WEB-CLIENT Opera Content-Length header integer overflow attempt (web-client.rules, High)