Sourcefire VRT Update

Date: 2007-05-14

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack.

The format of the file is:

sid - Message (rule group)

New rules:
11259 <-> WEB-CLIENT BarcodeWiz ActiveX clsid access (web-client.rules)
11260 <-> WEB-CLIENT BarcodeWiz ActiveX clsid unicode access (web-client.rules)
11261 <-> WEB-CLIENT BarcodeWiz ActiveX function call access (web-client.rules)
11262 <-> WEB-CLIENT BarcodeWiz ActiveX function call unicode access (web-client.rules)
11263 <-> DOS Apache mod_ssl non-SSL connection to SSL port denial of service attempt (dos.rules)
11264 <-> MS-SQL Server Hello buffer overflow attempt (sql.rules)
11265 <-> EXPLOIT Sentinel license manager buffer overflow attempt (exploit.rules)
11266 <-> EXPLOIT Kerio Personal Firewall authentication buffer overflow attempt (exploit.rules)
11267 <-> WEB-CLIENT Adobe Photoshop PNG file handling stack buffer overflow attempt (web-client.rules)
11268 <-> WEB-CLIENT Symantec Norton AntiVirus ActiveX clsid access (web-client.rules)
11269 <-> WEB-CLIENT Symantec Norton AntiVirus ActiveX clsid unicode access (web-client.rules)
11270 <-> WEB-CLIENT Symantec Norton AntiVirus ActiveX function call access (web-client.rules)
11271 <-> WEB-CLIENT Symantec Norton AntiVirus ActiveX function call unicode access (web-client.rules)
11272 <-> WEB-MISC Apache newline exploit attempt (web-misc.rules)
11273 <-> WEB-MISC Apache header parsing space saturation denial of service attempt (web-misc.rules)
11274 <-> WEB-CLIENT RControl ActiveX clsid access (web-client.rules)
11275 <-> WEB-CLIENT RControl ActiveX clsid unicode access (web-client.rules)
11276 <-> WEB-CLIENT GDivX Zenith Player AVI Fixer ActiveX clsid access (web-client.rules)
11277 <-> WEB-CLIENT GDivX Zenith Player AVI Fixer ActiveX clsid unicode access (web-client.rules)
11278 <-> WEB-CLIENT GDivX Zenith Player AVI Fixer ActiveX function call access (web-client.rules)
11279 <-> WEB-CLIENT GDivX Zenith Player AVI Fixer ActiveX function call unicode access (web-client.rules)
11280 <-> WEB-CLIENT FlexLabel ActiveX clsid access (web-client.rules)
11281 <-> WEB-CLIENT FlexLabel ActiveX clsid unicode access (web-client.rules)
11282 <-> WEB-CLIENT FlexLabel ActiveX function call access (web-client.rules)
11283 <-> WEB-CLIENT FlexLabel ActiveX function call unicode access (web-client.rules)
11284 <-> WEB-CLIENT AudioCDRipper ActiveX clsid access (web-client.rules)
11285 <-> WEB-CLIENT AudioCDRipper ActiveX clsid unicode access (web-client.rules)
11286 <-> WEB-CLIENT AudioCDRipper ActiveX function call access (web-client.rules)
11287 <-> WEB-CLIENT AudioCDRipper ActiveX function call unicode access (web-client.rules)
11288 <-> RPC portmap mountd tcp request (rpc.rules)
11289 <-> RPC portmap mountd tcp zero-length payload denial of service attempt (rpc.rules)

Updated rules:
2686 <-> ORACLE sys.dbms_rectifier_diff.differences buffer overflow attempt (oracle.rules)
10524 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs2 WriteAndX overflow attempt (deleted.rules)
10525 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX object call overflow attempt (deleted.rules)
10526 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 object call overflow attempt (deleted.rules)
10527 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs2 little endian overflow attempt (deleted.rules)
10528 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 unicode object call overflow attempt (deleted.rules)
10532 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX overflow attempt (deleted.rules)
10533 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX little endian overflow attempt (deleted.rules)
10534 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 little endian overflow attempt (deleted.rules)
10535 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 overflow attempt (deleted.rules)
10538 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 object call overflow attempt (deleted.rules)
10539 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 little endian object call overflow attempt (deleted.rules)
10540 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX little endian object call overflow attempt (deleted.rules)
10541 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 unicode object call overflow attempt (deleted.rules)
10543 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX unicode object call overflow attempt (deleted.rules)
10544 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX unicode little endian object call overflow attempt (deleted.rules)
10546 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 little endian object call overflow attempt (deleted.rules)
10547 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 unicode little endian object call overflow attempt (deleted.rules)
10548 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX unicode little endian object call overflow attempt (deleted.rules)
10549 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 unicode little endian overflow attempt (deleted.rules)
10551 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 WriteAndX unicode little endian overflow attempt (deleted.rules)
10553 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 unicode overflow attempt (deleted.rules)
10554 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 little endian overflow attempt (deleted.rules)
10556 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX little endian overflow attempt (deleted.rules)
10557 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs2 WriteAndX little endian overflow attempt (deleted.rules)
10559 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs2 WriteAndX unicode overflow attempt (deleted.rules)
10561 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 overflow attempt (deleted.rules)
10562 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 WriteAndX overflow attempt (deleted.rules)
10563 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs2 overflow attempt (deleted.rules)
10564 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 WriteAndX little endian overflow attempt (deleted.rules)
10565 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs2 unicode overflow attempt (deleted.rules)
10567 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 WriteAndX unicode overflow attempt (deleted.rules)
10569 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 unicode overflow attempt (deleted.rules)
10570 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs2 WriteAndX unicode little endian overflow attempt (deleted.rules)
10571 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs2 unicode little endian overflow attempt (deleted.rules)
10575 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 unicode little endian overflow attempt (deleted.rules)
10576 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX overflow attempt (deleted.rules)
10578 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX unicode overflow attempt (deleted.rules)
10579 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 overflow attempt (deleted.rules)
10582 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 unicode overflow attempt (deleted.rules)
10583 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX unicode overflow attempt (deleted.rules)
10584 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX unicode little endian overflow attempt (deleted.rules)
10585 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 little endian overflow attempt (deleted.rules)
10588 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX unicode little endian overflow attempt (deleted.rules)
10590 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 unicode little endian overflow attempt (deleted.rules)
10591 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX little endian object call overflow attempt (deleted.rules)
10593 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 unicode little endian object call overflow attempt (deleted.rules)
10594 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX unicode object call overflow attempt (deleted.rules)
10595 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX object call overflow attempt (deleted.rules)
10596 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs2 WriteAndX andx overflow attempt (deleted.rules)
10597 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX andx object call overflow attempt (deleted.rules)
10598 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 andx object call overflow attempt (deleted.rules)
10599 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs2 little endian andx overflow attempt (deleted.rules)
10600 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 unicode andx object call overflow attempt (deleted.rules)
10604 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX andx overflow attempt (deleted.rules)
10605 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX little endian andx overflow attempt (deleted.rules)
10606 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 little endian andx overflow attempt (deleted.rules)
10607 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 andx overflow attempt (deleted.rules)
10610 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 andx object call overflow attempt (deleted.rules)
10611 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 little endian andx object call overflow attempt (deleted.rules)
10612 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX little endian andx object call overflow attempt (deleted.rules)
10613 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 unicode andx object call overflow attempt (deleted.rules)
10615 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX unicode andx object call overflow attempt (deleted.rules)
10616 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX unicode little endian andx object call overflow attempt (deleted.rules)
10618 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 little endian andx object call overflow attempt (deleted.rules)
10619 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 unicode little endian andx object call overflow attempt (deleted.rules)
10620 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX unicode little endian andx object call overflow attempt (deleted.rules)
10621 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 unicode little endian andx overflow attempt (deleted.rules)
10623 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 WriteAndX unicode little endian andx overflow attempt (deleted.rules)
10625 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 unicode andx overflow attempt (deleted.rules)
10626 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 little endian andx overflow attempt (deleted.rules)
10628 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX little endian andx overflow attempt (deleted.rules)
10629 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs2 WriteAndX little endian andx overflow attempt (deleted.rules)
10631 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs2 WriteAndX unicode andx overflow attempt (deleted.rules)
10633 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 andx overflow attempt (deleted.rules)
10634 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 WriteAndX andx overflow attempt (deleted.rules)
10635 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs2 andx overflow attempt (deleted.rules)
10636 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 WriteAndX little endian andx overflow attempt (deleted.rules)
10637 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs2 unicode andx overflow attempt (deleted.rules)
10639 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 WriteAndX unicode andx overflow attempt (deleted.rules)
10641 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 unicode andx overflow attempt (deleted.rules)
10642 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs2 WriteAndX unicode little endian andx overflow attempt (deleted.rules)
10643 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs2 unicode little endian andx overflow attempt (deleted.rules)
10647 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 unicode little endian andx overflow attempt (deleted.rules)
10648 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX andx overflow attempt (deleted.rules)
10650 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX unicode andx overflow attempt (deleted.rules)
10651 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 andx overflow attempt (deleted.rules)
10654 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 unicode andx overflow attempt (deleted.rules)
10655 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX unicode andx overflow attempt (deleted.rules)
10656 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX unicode little endian andx overflow attempt (deleted.rules)
10657 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 little endian andx overflow attempt (deleted.rules)
10660 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX unicode little endian andx overflow attempt (deleted.rules)
10662 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs2 unicode little endian andx overflow attempt (deleted.rules)
10663 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX little endian andx object call overflow attempt (deleted.rules)
10665 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 unicode little endian andx object call overflow attempt (deleted.rules)
10666 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX unicode andx object call overflow attempt (deleted.rules)
10667 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX andx object call overflow attempt (deleted.rules)
10668 <-> DELETED NETBIOS DCERPC DIRECT-UDP v4 dns R_Dnssrv funcs2 little endian overflow attempt (deleted.rules)
10670 <-> DELETED NETBIOS DCERPC NCACN-IP-TCP v4 dns R_Dnssrv funcs2 overflow attempt (deleted.rules)
10671 <-> DELETED NETBIOS DCERPC NCACN-HTTP v4 dns R_Dnssrv funcs2 little endian overflow attempt (deleted.rules)
10673 <-> DELETED NETBIOS DCERPC NCACN-IP-TCP dns R_Dnssrv funcs2 little endian overflow attempt (deleted.rules)
10674 <-> DELETED NETBIOS DCERPC NCACN-HTTP v4 dns R_Dnssrv funcs2 overflow attempt (deleted.rules)
10675 <-> DELETED NETBIOS DCERPC NCADG-IP-UDP v4 dns R_Dnssrv funcs2 little endian overflow attempt (deleted.rules)
10676 <-> DELETED NETBIOS DCERPC NCADG-IP-UDP v4 dns R_Dnssrv funcs2 overflow attempt (deleted.rules)
10677 <-> DELETED NETBIOS DCERPC NCACN-IP-TCP v4 dns R_Dnssrv funcs2 little endian overflow attempt (deleted.rules)
10678 <-> DELETED NETBIOS DCERPC DIRECT-UDP v4 dns R_Dnssrv funcs2 overflow attempt (deleted.rules)
10680 <-> DELETED NETBIOS DCERPC NCACN-IP-TCP dns R_Dnssrv funcs2 overflow attempt (deleted.rules)
10681 <-> DELETED NETBIOS DCERPC DIRECT-UDP dns R_Dnssrv funcs2 little endian overflow attempt (deleted.rules)
10682 <-> DELETED NETBIOS DCERPC NCACN-HTTP dns R_Dnssrv funcs2 little endian overflow attempt (deleted.rules)
10683 <-> DELETED NETBIOS DCERPC NCADG-IP-UDP dns R_Dnssrv funcs2 overflow attempt (deleted.rules)
10684 <-> DELETED NETBIOS DCERPC NCADG-IP-UDP dns R_Dnssrv funcs2 little endian overflow attempt (deleted.rules)
10685 <-> DELETED NETBIOS DCERPC NCACN-HTTP dns R_Dnssrv funcs2 overflow attempt (deleted.rules)
10687 <-> DELETED NETBIOS DCERPC DIRECT-UDP dns R_Dnssrv funcs2 overflow attempt (deleted.rules)
10689 <-> DELETED NETBIOS DCERPC NCACN-IP-TCP dns R_Dnssrv funcs2 little endian object call overflow attempt (deleted.rules)
10691 <-> DELETED NETBIOS DCERPC NCACN-IP-TCP dns R_Dnssrv funcs2 object call overflow attempt (deleted.rules)
10692 <-> DELETED NETBIOS DCERPC DIRECT-UDP dns R_Dnssrv funcs2 little endian object call overflow attempt (deleted.rules)
10693 <-> DELETED NETBIOS DCERPC NCACN-HTTP dns R_Dnssrv funcs2 little endian object call overflow attempt (deleted.rules)
10694 <-> DELETED NETBIOS DCERPC NCADG-IP-UDP dns R_Dnssrv funcs2 object call overflow attempt (deleted.rules)
10695 <-> DELETED NETBIOS DCERPC NCADG-IP-UDP dns R_Dnssrv funcs2 little endian object call overflow attempt (deleted.rules)
10696 <-> DELETED NETBIOS DCERPC NCACN-HTTP dns R_Dnssrv funcs2 object call overflow attempt (deleted.rules)
10697 <-> DELETED NETBIOS DCERPC DIRECT-UDP dns R_Dnssrv funcs2 object call overflow attempt (deleted.rules)
10698 <-> DELETED NETBIOS SMB dns alter context attempt (deleted.rules)
10701 <-> DELETED NETBIOS SMB dns WriteAndX alter context attempt (deleted.rules)
10703 <-> DELETED NETBIOS-DG SMB dns alter context attempt (deleted.rules)
10704 <-> DELETED NETBIOS-DG SMB dns WriteAndX alter context attempt (deleted.rules)
10705 <-> DELETED NETBIOS-DG SMB dns unicode alter context attempt (deleted.rules)
10706 <-> DELETED NETBIOS SMB dns unicode alter context attempt (deleted.rules)
10707 <-> DELETED NETBIOS SMB dns WriteAndX unicode alter context attempt (deleted.rules)
10709 <-> DELETED NETBIOS-DG SMB dns WriteAndX unicode alter context attempt (deleted.rules)
10710 <-> DELETED NETBIOS SMB dns little endian alter context attempt (deleted.rules)
10711 <-> DELETED NETBIOS SMB dns WriteAndX little endian alter context attempt (deleted.rules)
10712 <-> DELETED NETBIOS SMB dns unicode little endian alter context attempt (deleted.rules)
10713 <-> DELETED NETBIOS SMB dns WriteAndX unicode little endian alter context attempt (deleted.rules)
10718 <-> DELETED NETBIOS-DG SMB dns little endian alter context attempt (deleted.rules)
10719 <-> DELETED NETBIOS-DG SMB dns WriteAndX little endian alter context attempt (deleted.rules)
10720 <-> DELETED NETBIOS-DG SMB dns unicode little endian alter context attempt (deleted.rules)
10721 <-> DELETED NETBIOS-DG SMB dns WriteAndX unicode little endian alter context attempt (deleted.rules)
10722 <-> DELETED NETBIOS SMB dns bind attempt (deleted.rules)
10723 <-> DELETED NETBIOS SMB dns WriteAndX bind attempt (deleted.rules)
10724 <-> DELETED NETBIOS SMB dns unicode bind attempt (deleted.rules)
10725 <-> DELETED NETBIOS SMB dns WriteAndX unicode bind attempt (deleted.rules)
10730 <-> DELETED NETBIOS-DG SMB dns bind attempt (deleted.rules)
10731 <-> DELETED NETBIOS-DG SMB dns WriteAndX bind attempt (deleted.rules)
10732 <-> DELETED NETBIOS-DG SMB dns unicode bind attempt (deleted.rules)
10733 <-> DELETED NETBIOS-DG SMB dns WriteAndX unicode bind attempt (deleted.rules)
10734 <-> DELETED NETBIOS SMB dns little endian bind attempt (deleted.rules)
10735 <-> DELETED NETBIOS SMB dns WriteAndX little endian bind attempt (deleted.rules)
10736 <-> DELETED NETBIOS SMB dns unicode little endian bind attempt (deleted.rules)
10737 <-> DELETED NETBIOS SMB dns WriteAndX unicode little endian bind attempt (deleted.rules)
10742 <-> DELETED NETBIOS-DG SMB dns little endian bind attempt (deleted.rules)
10743 <-> DELETED NETBIOS-DG SMB dns WriteAndX little endian bind attempt (deleted.rules)
10744 <-> DELETED NETBIOS-DG SMB dns unicode little endian bind attempt (deleted.rules)
10745 <-> DELETED NETBIOS-DG SMB dns WriteAndX unicode little endian bind attempt (deleted.rules)
10746 <-> DELETED NETBIOS SMB dns andx alter context attempt (deleted.rules)
10749 <-> DELETED NETBIOS SMB dns WriteAndX andx alter context attempt (deleted.rules)
10751 <-> DELETED NETBIOS-DG SMB dns andx alter context attempt (deleted.rules)
10752 <-> DELETED NETBIOS-DG SMB dns WriteAndX andx alter context attempt (deleted.rules)
10753 <-> DELETED NETBIOS-DG SMB dns unicode andx alter context attempt (deleted.rules)
10754 <-> DELETED NETBIOS SMB dns unicode andx alter context attempt (deleted.rules)
10755 <-> DELETED NETBIOS SMB dns WriteAndX unicode andx alter context attempt (deleted.rules)
10757 <-> DELETED NETBIOS-DG SMB dns WriteAndX unicode andx alter context attempt (deleted.rules)
10758 <-> DELETED NETBIOS SMB dns little endian andx alter context attempt (deleted.rules)
10759 <-> DELETED NETBIOS SMB dns WriteAndX little endian andx alter context attempt (deleted.rules)
10760 <-> DELETED NETBIOS SMB dns unicode little endian andx alter context attempt (deleted.rules)
10761 <-> DELETED NETBIOS SMB dns WriteAndX unicode little endian andx alter context attempt (deleted.rules)
10766 <-> DELETED NETBIOS-DG SMB dns little endian andx alter context attempt (deleted.rules)
10767 <-> DELETED NETBIOS-DG SMB dns WriteAndX little endian andx alter context attempt (deleted.rules)
10768 <-> DELETED NETBIOS-DG SMB dns unicode little endian andx alter context attempt (deleted.rules)
10769 <-> DELETED NETBIOS-DG SMB dns WriteAndX unicode little endian andx alter context attempt (deleted.rules)
10770 <-> DELETED NETBIOS SMB dns andx bind attempt (deleted.rules)
10771 <-> DELETED NETBIOS SMB dns WriteAndX andx bind attempt (deleted.rules)
10772 <-> DELETED NETBIOS SMB dns unicode andx bind attempt (deleted.rules)
10773 <-> DELETED NETBIOS SMB dns WriteAndX unicode andx bind attempt (deleted.rules)
10778 <-> DELETED NETBIOS-DG SMB dns andx bind attempt (deleted.rules)
10779 <-> DELETED NETBIOS-DG SMB dns WriteAndX andx bind attempt (deleted.rules)
10780 <-> DELETED NETBIOS-DG SMB dns unicode andx bind attempt (deleted.rules)
10781 <-> DELETED NETBIOS-DG SMB dns WriteAndX unicode andx bind attempt (deleted.rules)
10782 <-> DELETED NETBIOS SMB dns little endian andx bind attempt (deleted.rules)
10783 <-> DELETED NETBIOS SMB dns WriteAndX little endian andx bind attempt (deleted.rules)
10784 <-> DELETED NETBIOS SMB dns unicode little endian andx bind attempt (deleted.rules)
10785 <-> DELETED NETBIOS SMB dns WriteAndX unicode little endian andx bind attempt (deleted.rules)
10790 <-> DELETED NETBIOS-DG SMB dns little endian andx bind attempt (deleted.rules)
10791 <-> DELETED NETBIOS-DG SMB dns WriteAndX little endian andx bind attempt (deleted.rules)
10792 <-> DELETED NETBIOS-DG SMB dns unicode little endian andx bind attempt (deleted.rules)
10793 <-> DELETED NETBIOS-DG SMB dns WriteAndX unicode little endian andx bind attempt (deleted.rules)
10794 <-> DELETED NETBIOS DCERPC NCACN-IP-TCP dns alter context attempt (deleted.rules)
10795 <-> DELETED NETBIOS DCERPC DIRECT-UDP dns alter context attempt (deleted.rules)
10796 <-> DELETED NETBIOS DCERPC NCACN-HTTP dns little endian alter context attempt (deleted.rules)
10797 <-> DELETED NETBIOS DCERPC NCADG-IP-UDP dns alter context attempt (deleted.rules)
10798 <-> DELETED NETBIOS DCERPC NCADG-IP-UDP dns little endian alter context attempt (deleted.rules)
10799 <-> DELETED NETBIOS DCERPC DIRECT-UDP dns little endian alter context attempt (deleted.rules)
10800 <-> DELETED NETBIOS DCERPC NCACN-IP-TCP dns little endian alter context attempt (deleted.rules)
10801 <-> DELETED NETBIOS DCERPC NCACN-HTTP dns alter context attempt (deleted.rules)
10802 <-> DELETED NETBIOS DCERPC NCACN-IP-TCP dns bind attempt (deleted.rules)
10803 <-> DELETED NETBIOS DCERPC DIRECT-UDP dns bind attempt (deleted.rules)
10804 <-> DELETED NETBIOS DCERPC NCACN-HTTP dns little endian bind attempt (deleted.rules)
10805 <-> DELETED NETBIOS DCERPC NCADG-IP-UDP dns bind attempt (deleted.rules)
10806 <-> DELETED NETBIOS DCERPC NCADG-IP-UDP dns little endian bind attempt (deleted.rules)
10807 <-> DELETED NETBIOS DCERPC DIRECT-UDP dns little endian bind attempt (deleted.rules)
10808 <-> DELETED NETBIOS DCERPC NCACN-IP-TCP dns little endian bind attempt (deleted.rules)
10809 <-> DELETED NETBIOS DCERPC NCACN-HTTP dns bind attempt (deleted.rules)
10811 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs1 WriteAndX overflow attempt (deleted.rules)
10813 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs1 little endian overflow attempt (deleted.rules)
10814 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs1 unicode little endian overflow attempt (deleted.rules)
10816 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs1 WriteAndX unicode little endian overflow attempt (deleted.rules)
10817 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs1 unicode overflow attempt (deleted.rules)
10818 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs1 WriteAndX unicode overflow attempt (deleted.rules)
10819 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs1 WriteAndX little endian overflow attempt (deleted.rules)
10820 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs1 overflow attempt (deleted.rules)
10821 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs1 WriteAndX unicode little endian overflow attempt (deleted.rules)
10822 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs1 unicode little endian overflow attempt (deleted.rules)
10824 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 overflow attempt (deleted.rules)
10830 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 WriteAndX object call overflow attempt (deleted.rules)
10831 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 WriteAndX unicode object call overflow attempt (deleted.rules)
10832 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 unicode object call overflow attempt (deleted.rules)
10833 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 WriteAndX little endian object call overflow attempt (deleted.rules)
10834 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 little endian object call overflow attempt (deleted.rules)
10835 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 little endian object call overflow attempt (deleted.rules)
10836 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 WriteAndX object call overflow attempt (deleted.rules)
10838 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 unicode little endian object call overflow attempt (deleted.rules)
10840 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 WriteAndX unicode little endian object call overflow attempt (deleted.rules)
10841 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 unicode object call overflow attempt (deleted.rules)
10842 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 WriteAndX unicode object call overflow attempt (deleted.rules)
10843 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 WriteAndX little endian object call overflow attempt (deleted.rules)
10844 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 object call overflow attempt (deleted.rules)
10845 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 WriteAndX unicode little endian object call overflow attempt (deleted.rules)
10846 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 unicode little endian object call overflow attempt (deleted.rules)
10848 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 WriteAndX unicode overflow attempt (deleted.rules)
10849 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 unicode overflow attempt (deleted.rules)
10850 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 WriteAndX little endian overflow attempt (deleted.rules)
10852 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs1 overflow attempt (deleted.rules)
10855 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs1 WriteAndX overflow attempt (deleted.rules)
10856 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs1 WriteAndX unicode overflow attempt (deleted.rules)
10857 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs1 unicode overflow attempt (deleted.rules)
10858 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs1 WriteAndX little endian overflow attempt (deleted.rules)
10860 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 little endian overflow attempt (deleted.rules)
10861 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 little endian overflow attempt (deleted.rules)
10862 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs1 little endian overflow attempt (deleted.rules)
10863 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 WriteAndX overflow attempt (deleted.rules)
10865 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 unicode little endian overflow attempt (deleted.rules)
10867 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 WriteAndX unicode little endian overflow attempt (deleted.rules)
10868 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 unicode overflow attempt (deleted.rules)
10869 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 WriteAndX unicode overflow attempt (deleted.rules)
10870 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 WriteAndX little endian overflow attempt (deleted.rules)
10871 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 overflow attempt (deleted.rules)
10872 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 WriteAndX unicode little endian overflow attempt (deleted.rules)
10873 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 unicode little endian overflow attempt (deleted.rules)
10875 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 object call overflow attempt (deleted.rules)
10881 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 WriteAndX overflow attempt (deleted.rules)
10883 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs1 WriteAndX andx overflow attempt (deleted.rules)
10885 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs1 little endian andx overflow attempt (deleted.rules)
10886 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs1 unicode little endian andx overflow attempt (deleted.rules)
10888 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs1 WriteAndX unicode little endian andx overflow attempt (deleted.rules)
10889 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs1 unicode andx overflow attempt (deleted.rules)
10890 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs1 WriteAndX unicode andx overflow attempt (deleted.rules)
10891 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs1 WriteAndX little endian andx overflow attempt (deleted.rules)
10892 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs1 andx overflow attempt (deleted.rules)
10893 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs1 WriteAndX unicode little endian andx overflow attempt (deleted.rules)
10894 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs1 unicode little endian andx overflow attempt (deleted.rules)
10896 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 andx overflow attempt (deleted.rules)
10902 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 WriteAndX andx object call overflow attempt (deleted.rules)
10903 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 WriteAndX unicode andx object call overflow attempt (deleted.rules)
10904 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 unicode andx object call overflow attempt (deleted.rules)
10905 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 WriteAndX little endian andx object call overflow attempt (deleted.rules)
10906 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 little endian andx object call overflow attempt (deleted.rules)
10907 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 little endian andx object call overflow attempt (deleted.rules)
10908 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 WriteAndX andx object call overflow attempt (deleted.rules)
10910 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 unicode little endian andx object call overflow attempt (deleted.rules)
10912 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 WriteAndX unicode little endian andx object call overflow attempt (deleted.rules)
10913 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 unicode andx object call overflow attempt (deleted.rules)
10914 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 WriteAndX unicode andx object call overflow attempt (deleted.rules)
10915 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 WriteAndX little endian andx object call overflow attempt (deleted.rules)
10916 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 andx object call overflow attempt (deleted.rules)
10917 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 WriteAndX unicode little endian andx object call overflow attempt (deleted.rules)
10918 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 unicode little endian andx object call overflow attempt (deleted.rules)
10920 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 WriteAndX unicode andx overflow attempt (deleted.rules)
10921 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 unicode andx overflow attempt (deleted.rules)
10922 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 WriteAndX little endian andx overflow attempt (deleted.rules)
10924 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs1 andx overflow attempt (deleted.rules)
10927 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs1 WriteAndX andx overflow attempt (deleted.rules)
10928 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs1 WriteAndX unicode andx overflow attempt (deleted.rules)
10929 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs1 unicode andx overflow attempt (deleted.rules)
10930 <-> DELETED NETBIOS SMB v4 dns R_Dnssrv funcs1 WriteAndX little endian andx overflow attempt (deleted.rules)
10932 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 little endian andx overflow attempt (deleted.rules)
10933 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 little endian andx overflow attempt (deleted.rules)
10934 <-> DELETED NETBIOS-DG SMB v4 dns R_Dnssrv funcs1 little endian andx overflow attempt (deleted.rules)
10935 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 WriteAndX andx overflow attempt (deleted.rules)
10937 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 unicode little endian andx overflow attempt (deleted.rules)
10939 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 WriteAndX unicode little endian andx overflow attempt (deleted.rules)
10940 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 unicode andx overflow attempt (deleted.rules)
10941 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 WriteAndX unicode andx overflow attempt (deleted.rules)
10942 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 WriteAndX little endian andx overflow attempt (deleted.rules)
10943 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 andx overflow attempt (deleted.rules)
10944 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 WriteAndX unicode little endian andx overflow attempt (deleted.rules)
10945 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 unicode little endian andx overflow attempt (deleted.rules)
10947 <-> DELETED NETBIOS SMB dns R_Dnssrv funcs1 andx object call overflow attempt (deleted.rules)
10953 <-> DELETED NETBIOS-DG SMB dns R_Dnssrv funcs1 WriteAndX andx overflow attempt (deleted.rules)
10954 <-> DELETED NETBIOS DCERPC NCACN-IP-TCP dns R_Dnssrv funcs1 overflow attempt (deleted.rules)
10955 <-> DELETED NETBIOS DCERPC NCADG-IP-UDP dns R_Dnssrv funcs1 little endian overflow attempt (deleted.rules)
10956 <-> DELETED NETBIOS DCERPC NCADG-IP-UDP dns R_Dnssrv funcs1 overflow attempt (deleted.rules)
10957 <-> DELETED NETBIOS DCERPC NCACN-IP-TCP dns R_Dnssrv funcs1 little endian overflow attempt (deleted.rules)
10958 <-> DELETED NETBIOS DCERPC DIRECT-UDP dns R_Dnssrv funcs1 little endian overflow attempt (deleted.rules)
10959 <-> DELETED NETBIOS DCERPC NCACN-IP-TCP v4 dns R_Dnssrv funcs1 little endian overflow attempt (deleted.rules)
10960 <-> DELETED NETBIOS DCERPC DIRECT-UDP dns R_Dnssrv funcs1 overflow attempt (deleted.rules)
10961 <-> DELETED NETBIOS DCERPC DIRECT-UDP v4 dns R_Dnssrv funcs1 little endian overflow attempt (deleted.rules)
10962 <-> DELETED NETBIOS DCERPC NCACN-HTTP dns R_Dnssrv funcs1 overflow attempt (deleted.rules)
10963 <-> DELETED NETBIOS DCERPC NCACN-HTTP dns R_Dnssrv funcs1 little endian overflow attempt (deleted.rules)
10964 <-> DELETED NETBIOS DCERPC NCADG-IP-UDP v4 dns R_Dnssrv funcs1 little endian overflow attempt (deleted.rules)
10965 <-> DELETED NETBIOS DCERPC DIRECT-UDP v4 dns R_Dnssrv funcs1 overflow attempt (deleted.rules)
10966 <-> DELETED NETBIOS DCERPC NCACN-IP-TCP v4 dns R_Dnssrv funcs1 overflow attempt (deleted.rules)
10967 <-> DELETED NETBIOS DCERPC NCADG-IP-UDP v4 dns R_Dnssrv funcs1 overflow attempt (deleted.rules)
10968 <-> DELETED NETBIOS DCERPC NCACN-HTTP v4 dns R_Dnssrv funcs1 little endian overflow attempt (deleted.rules)
10969 <-> DELETED NETBIOS DCERPC NCACN-HTTP v4 dns R_Dnssrv funcs1 overflow attempt (deleted.rules)
10970 <-> DELETED NETBIOS DCERPC NCACN-IP-TCP dns R_Dnssrv funcs1 object call overflow attempt (deleted.rules)
10971 <-> DELETED NETBIOS DCERPC NCADG-IP-UDP dns R_Dnssrv funcs1 little endian object call overflow attempt (deleted.rules)
10972 <-> DELETED NETBIOS DCERPC NCADG-IP-UDP dns R_Dnssrv funcs1 object call overflow attempt (deleted.rules)
10973 <-> DELETED NETBIOS DCERPC NCACN-IP-TCP dns R_Dnssrv funcs1 little endian object call overflow attempt (deleted.rules)
10974 <-> DELETED NETBIOS DCERPC DIRECT-UDP dns R_Dnssrv funcs1 little endian object call overflow attempt (deleted.rules)
10975 <-> DELETED NETBIOS DCERPC DIRECT-UDP dns R_Dnssrv funcs1 object call overflow attempt (deleted.rules)
10976 <-> DELETED NETBIOS DCERPC NCACN-HTTP dns R_Dnssrv funcs1 object call overflow attempt (deleted.rules)
10977 <-> DELETED NETBIOS DCERPC NCACN-HTTP dns R_Dnssrv funcs1 little endian object call overflow attempt (deleted.rules)
10997 <-> WEB-MISC SSLv2 OpenSSl KEY_ARG buffer overflow attempt (web-misc.rules)
11247 <-> WEB-CLIENT Research In Motion TeamOn Import ActiveX clsid access (web-client.rules)
11248 <-> WEB-CLIENT Research In Motion TeamOn Import ActiveX clsid unicode access (web-client.rules)
11249 <-> WEB-CLIENT IE Address ActiveX clsid unicode access (web-client.rules)
11252 <-> WEB-CLIENT IE Address ActiveX clsid access (web-client.rules)
11258 <-> WEB-CLIENT Excel Malformed Named Graph Information unicode overflow (web-client.rules)