Snort mailing list archives

Community Rule Update


From: Alex Kirk <alex.kirk () sourcefire com>
Date: Tue, 05 Apr 2005 15:29:58 -0400

This message is to announce the availability of an update for the Sourcefire community rule set, which can be downloaded free of cost or registration from http://www.snort.org/pub-bin/downloads.cgi.

This release incorporates suggested changes for SID 100000132, as well as updated documentation discussing the possibility of using var KNOWN_PROXY_SERVERS with that rule. Additionally, new SID 100000133 covers a denial of service for the Xeneo web server.

As with all Snort rulesets, comments and questions are welcome. Users who wish to submit their own rules may do so at http://www.snort.org/reg-bin/rulesubmit.cgi.

Alex Kirk
Community Rules Maintainer/
Research Analyst
Sourcefire, Inc.

----------------------------------------------------------------------
New Rule:

100000133 || COMMUNITY WEB-DoS Xeneo Server Question Mark GET Request || bugtraq,7398 || url,www.northernsolutions.com/support/index.php?view=support&cmd=releasenotes&productid=1

Updated Rule:

100000132 || COMMUNITY WEB-MISC Proxy Server Access
----------------------------------------------------------------------


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: