Snort mailing list archives
Community Rule Update
From: Alex Kirk <alex.kirk () sourcefire com>
Date: Tue, 05 Apr 2005 15:29:58 -0400
This message is to announce the availability of an update for the Sourcefire community rule set, which can be downloaded free of cost or registration from http://www.snort.org/pub-bin/downloads.cgi.
This release incorporates suggested changes for SID 100000132, as well as updated documentation discussing the possibility of using var KNOWN_PROXY_SERVERS with that rule. Additionally, new SID 100000133 covers a denial of service for the Xeneo web server.
As with all Snort rulesets, comments and questions are welcome. Users who wish to submit their own rules may do so at http://www.snort.org/reg-bin/rulesubmit.cgi.
Alex Kirk Community Rules Maintainer/ Research Analyst Sourcefire, Inc. ---------------------------------------------------------------------- New Rule:100000133 || COMMUNITY WEB-DoS Xeneo Server Question Mark GET Request || bugtraq,7398 || url,www.northernsolutions.com/support/index.php?view=support&cmd=releasenotes&productid=1
Updated Rule: 100000132 || COMMUNITY WEB-MISC Proxy Server Access ---------------------------------------------------------------------- ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Community Rule Update Alex Kirk (Apr 02)
- <Possible follow-ups>
- Community Rule Update Alex Kirk (Apr 05)
