Sourcefire VRT Update
Date: 2006-08-11
This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack.
The format of the file is:
sid - Message (rule group)
Updated rules: 7209 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode little endian overflow attempt (netbios.rules) 7210 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize little endian object call overflow attempt (netbios.rules) 7211 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize little endian overflow attempt (netbios.rules) 7212 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX unicode little endian overflow attempt (netbios.rules) 7213 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX unicode overflow attempt (netbios.rules) 7214 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX overflow attempt (netbios.rules) 7215 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode overflow attempt (netbios.rules) 7216 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX little endian overflow attempt (netbios.rules) 7217 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize unicode overflow attempt (netbios.rules) 7218 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX little endian overflow attempt (netbios.rules) 7219 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode little endian object call overflow attempt (netbios.rules) 7220 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX overflow attempt (netbios.rules) 7221 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode little endian object call overflow attempt (netbios.rules) 7222 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize little endian overflow attempt (netbios.rules) 7223 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode overflow attempt (netbios.rules) 7224 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode little endian overflow attempt (netbios.rules) 7225 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX object call overflow attempt (netbios.rules) 7226 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode object call overflow attempt (netbios.rules) 7227 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize little endian object call overflow attempt (netbios.rules) 7228 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode object call overflow attempt (netbios.rules) 7229 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode object call overflow attempt (netbios.rules) 7230 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX object call overflow attempt (netbios.rules) 7231 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize unicode overflow attempt (netbios.rules) 7232 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize overflow attempt (netbios.rules) 7233 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode overflow attempt (netbios.rules) 7234 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode overflow attempt (netbios.rules) 7235 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize little endian overflow attempt (netbios.rules) 7236 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize overflow attempt (netbios.rules) 7237 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize object call overflow attempt (netbios.rules) 7238 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize little endian overflow attempt (netbios.rules) 7239 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX little endian overflow attempt (netbios.rules) 7240 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode little endian overflow attempt (netbios.rules) 7241 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode little endian overflow attempt (netbios.rules) 7242 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX overflow attempt (netbios.rules) 7243 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX unicode little endian overflow attempt (netbios.rules) 7244 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize overflow attempt (netbios.rules) 7245 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize unicode little endian overflow attempt (netbios.rules) 7246 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize overflow attempt (netbios.rules) 7247 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX overflow attempt (netbios.rules) 7248 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize object call overflow attempt (netbios.rules) 7249 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX little endian object call overflow attempt (netbios.rules) 7250 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX little endian overflow attempt (netbios.rules) 7251 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode little endian object call overflow attempt (netbios.rules) 7252 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX little endian object call overflow attempt (netbios.rules) 7253 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode object call overflow attempt (netbios.rules) 7254 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX unicode overflow attempt (netbios.rules) 7255 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize unicode little endian overflow attempt (netbios.rules) 7256 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode little endian object call overflow attempt (netbios.rules) 7257 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode little endian andx overflow attempt (netbios.rules) 7258 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize little endian andx object call overflow attempt (netbios.rules) 7259 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize little endian andx overflow attempt (netbios.rules) 7260 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx overflow attempt (netbios.rules) 7261 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX unicode andx overflow attempt (netbios.rules) 7262 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX andx overflow attempt (netbios.rules) 7263 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode andx overflow attempt (netbios.rules) 7264 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX little endian andx overflow attempt (netbios.rules) 7265 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize unicode andx overflow attempt (netbios.rules) 7266 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX little endian andx overflow attempt (netbios.rules) 7267 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx object call overflow attempt (netbios.rules) 7268 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX andx overflow attempt (netbios.rules) 7269 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx object call overflow attempt (netbios.rules) 7270 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize little endian andx overflow attempt (netbios.rules) 7271 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode andx overflow attempt (netbios.rules) 7272 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode little endian andx overflow attempt (netbios.rules) 7273 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX andx object call overflow attempt (netbios.rules) 7274 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode andx object call overflow attempt (netbios.rules) 7275 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize little endian andx object call overflow attempt (netbios.rules) 7276 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode andx object call overflow attempt (netbios.rules) 7277 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode andx object call overflow attempt (netbios.rules) 7278 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX andx object call overflow attempt (netbios.rules) 7279 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize unicode andx overflow attempt (netbios.rules) 7280 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize andx overflow attempt (netbios.rules) 7281 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode andx overflow attempt (netbios.rules) 7282 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode andx overflow attempt (netbios.rules) 7283 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize little endian andx overflow attempt (netbios.rules) 7284 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize andx overflow attempt (netbios.rules) 7285 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize andx object call overflow attempt (netbios.rules) 7286 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize little endian andx overflow attempt (netbios.rules) 7287 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX little endian andx overflow attempt (netbios.rules) 7288 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx overflow attempt (netbios.rules) 7289 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx overflow attempt (netbios.rules) 7290 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX andx overflow attempt (netbios.rules) 7291 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx overflow attempt (netbios.rules) 7292 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize andx overflow attempt (netbios.rules) 7293 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize unicode little endian andx overflow attempt (netbios.rules) 7294 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize andx overflow attempt (netbios.rules) 7295 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX andx overflow attempt (netbios.rules) 7296 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize andx object call overflow attempt (netbios.rules) 7297 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX little endian andx object call overflow attempt (netbios.rules) 7298 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX little endian andx overflow attempt (netbios.rules) 7299 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode little endian andx object call overflow attempt (netbios.rules) 7300 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX little endian andx object call overflow attempt (netbios.rules) 7301 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode andx object call overflow attempt (netbios.rules) 7302 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX unicode andx overflow attempt (netbios.rules) 7303 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize unicode little endian andx overflow attempt (netbios.rules) 7304 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode little endian andx object call overflow attempt (netbios.rules)
