Sourcefire VRT Update
Date: 2006-10-04
This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack.
The format of the file is:
sid - Message (rule group)
New rules: 8426 <-> Enabled <-> WEB-MISC SSLv2 openssl get shared ciphers overflow attempt (web-misc.rules) 8427 <-> Enabled <-> WEB-MISC SSLv3 openssl get shared ciphers overflow attempt (web-misc.rules) 8428 <-> Enabled <-> WEB-MISC SSLv2 openssl get shared ciphers overflow attempt (web-misc.rules) 8429 <-> Enabled <-> POP3 SSLv2 openssl get shared ciphers overflow attempt (pop3.rules) 8430 <-> Enabled <-> POP3 SSLv3 openssl get shared ciphers overflow attempt (pop3.rules) 8431 <-> Enabled <-> POP3 SSLv2 openssl get shared ciphers overflow attempt (pop3.rules) 8432 <-> Enabled <-> SMTP SSLv2 openssl get shared ciphers overflow attempt (smtp.rules) 8433 <-> Enabled <-> SMTP SSLv2 openssl get shared ciphers overflow attempt (smtp.rules) 8434 <-> Enabled <-> SMTP SSLv3 openssl get shared ciphers overflow attempt (smtp.rules) 8435 <-> Enabled <-> SMTP SSLv3 openssl get shared ciphers overflow attempt (smtp.rules) 8436 <-> Enabled <-> SMTP SSLv2 openssl get shared ciphers overflow attempt (smtp.rules) 8437 <-> Enabled <-> SMTP SSLv2 openssl get shared ciphers overflow attempt (smtp.rules) 8438 <-> Enabled <-> IMAP SSLv2 openssl get shared ciphers overflow attempt (imap.rules) 8439 <-> Enabled <-> IMAP SSLv3 openssl get shared ciphers overflow attempt (imap.rules) 8440 <-> Enabled <-> IMAP SSLv2 openssl get shared ciphers overflow attempt (imap.rules) 8441 <-> Enabled <-> WEB-MISC McAfee header buffer overflow attempt (web-misc.rules) 8442 <-> Enabled <-> SMTP Mozilla regular expression heap corruption attempt (smtp.rules) 8443 <-> Disabled <-> WEB-CLIENT Mozilla regular expression heap corruption attempt (web-client.rules)
