Sourcefire VRT Update

Date: 2006-03-29

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack.

The format of the file is:

sid - Message (rule group)

New rules:
5739 - SMTP headers too long server response (smtp.rules)
5740 - WEB-CLIENT Microsoft HTML help workshop file .hhp download attempt (web-client.rules)
5741 - WEB-CLIENT Microsoft HTML help workshop buffer overflow attempt (web-client.rules)

Updated rules:
5727 - NETBIOS SMB-DS Trans Max Param DOS attempt (netbios.rules)
5728 - NETBIOS SMB-DS Trans unicode Max Param DOS attempt (netbios.rules)
5729 - NETBIOS SMB Trans unicode Max Param DOS attempt (netbios.rules)
5730 - NETBIOS SMB Trans Max Param DOS attempt (netbios.rules)
5731 - NETBIOS-DG SMB Trans Max Param DOS attempt (netbios.rules)
5732 - NETBIOS-DG SMB Trans unicode Max Param DOS attempt (netbios.rules)
5733 - NETBIOS SMB-DS Trans andx Max Param DOS attempt (netbios.rules)
5734 - NETBIOS SMB-DS Trans unicode andx Max Param DOS attempt (netbios.rules)
5735 - NETBIOS SMB Trans unicode andx Max Param DOS attempt (netbios.rules)
5736 - NETBIOS SMB Trans andx Max Param DOS attempt (netbios.rules)
5737 - NETBIOS-DG SMB Trans andx Max Param DOS attempt (netbios.rules)
5738 - NETBIOS-DG SMB Trans unicode andx Max Param DOS attempt (netbios.rules)