Sourcefire VRT Update
Date: 2006-03-29
This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack.
The format of the file is:
sid - Message (rule group)
New rules: 5739 - SMTP headers too long server response (smtp.rules) 5740 - WEB-CLIENT Microsoft HTML help workshop file .hhp download attempt (web-client.rules) 5741 - WEB-CLIENT Microsoft HTML help workshop buffer overflow attempt (web-client.rules) Updated rules: 5727 - NETBIOS SMB-DS Trans Max Param DOS attempt (netbios.rules) 5728 - NETBIOS SMB-DS Trans unicode Max Param DOS attempt (netbios.rules) 5729 - NETBIOS SMB Trans unicode Max Param DOS attempt (netbios.rules) 5730 - NETBIOS SMB Trans Max Param DOS attempt (netbios.rules) 5731 - NETBIOS-DG SMB Trans Max Param DOS attempt (netbios.rules) 5732 - NETBIOS-DG SMB Trans unicode Max Param DOS attempt (netbios.rules) 5733 - NETBIOS SMB-DS Trans andx Max Param DOS attempt (netbios.rules) 5734 - NETBIOS SMB-DS Trans unicode andx Max Param DOS attempt (netbios.rules) 5735 - NETBIOS SMB Trans unicode andx Max Param DOS attempt (netbios.rules) 5736 - NETBIOS SMB Trans andx Max Param DOS attempt (netbios.rules) 5737 - NETBIOS-DG SMB Trans andx Max Param DOS attempt (netbios.rules) 5738 - NETBIOS-DG SMB Trans unicode andx Max Param DOS attempt (netbios.rules)
