CVS: snort - cazz
Brian Caswell <[email protected]>
| Newsgroups | gmane.comp.security.ids.snort.cvs |
|---|---|
| Message-ID | <[email protected]> |
CVSROOT: /cvsroot/snort Module name: snort Changes by: cazz@sc8-pr-cvs1. 2003/12/16 14:14:43 Modified files: etc : sid sid-msg.map rules : backdoor.rules bad-traffic.rules ftp.rules imap.rules netbios.rules pop3.rules shellcode.rules smtp.rules web-cgi.rules web-misc.rules web-php.rules Log message: * a bunch of rule changes, including a ton of new rules. go PCRE. stable sync will happen later tonight. 2259 || SMTP EXPN overflow attempt || cve,CAN-2002-1337 || bugtraq,6991 || cve,CAN-2003-0161 || bugtraq,7230 || cve,CAN-2003-0161 2260 || SMTP VRFY overflow attempt || cve,CAN-2002-1337 || bugtraq,6991 || cve,CAN-2003-0161 || bugtraq,7230 || cve,CAN-2003-0161 2261 || SMTP SEND FROM sendmail prescan too many addresses overflow || cve,CAN-2002-1337 || bugtraq,6991 2262 || SMTP SEND FROM sendmail prescan too long addresses overflow || cve,CAN-2003-0161 || bugtraq,7230 2263 || SMTP SAML FROM sendmail prescan too many addresses overflow || cve,CAN-2002-1337 || bugtraq,6991 2264 || SMTP SAML FROM sendmail prescan too long addresses overflow || cve,CAN-2003-0161 || bugtraq,7230 2265 || SMTP SOML FROM sendmail prescan too many addresses overflow || cve,CAN-2002-1337 || bugtraq,6991 2266 || SMTP SOML FROM sendmail prescan too long addresses overflow || cve,CAN-2003-0161 || bugtraq,7230 2267 || SMTP MAIL FROM sendmail prescan too many addresses overflow || cve,CAN-2002-1337 || bugtraq,6991 2268 || SMTP MAIL FROM sendmail prescan too long addresses overflow || cve,CAN-2003-0161 || bugtraq,7230 2269 || SMTP RCPT TO sendmail prescan too many addresses overflow || cve,CAN-2002-1337 || bugtraq,6991 2270 || SMTP RCPT TO sendmail prescan too long addresses overflow || cve,CAN-2003-0161 || bugtraq,7230 2271 || BACKDOOR FsSniffer connection attempt || nessus,11854 2272 || FTP LIST integer overflow attempt || bugtraq,8875 || cve,CAN-2003-0854 || cve,CAN-2003-0853 2273 || IMAP login brute force attempt 2274 || POP3 login brute force attempt 2275 || SMTP AUTH LOGON brute force attempt 2276 || WEB-MISC oracle portal demo access || nessus,11918 2277 || WEB-MISC PeopleSoft PeopleBooks psdoccgi access || bugtraq,9037 || bugtraq,9038 || cve,CAN-2003-0626 || cve,CAN-2003-0627 2278 || WEB-MISC negative Content-Length attempt || bugtraq,9098 2279 || WEB-PHP UpdateClasses.php access || bugtraq,9057 2280 || WEB-PHP Title.php access || bugtraq,9057 2281 || WEB-PHP Setup.php access || bugtraq,9057 2282 || WEB-PHP GlobalFunctions.php access || bugtraq,9057 2283 || WEB-PHP DatabaseFunctions.php access || bugtraq,9057 2284 || WEB-PHP rolis guestbook arbitrary command execution attempt || bugtraq,9057 2285 || WEB-PHP rolis guestbook access || bugtraq,9057 2286 || WEB-PHP friends.php access || bugtraq,9088 2287 || WEB-PHP Advanced Poll admin_comment.php access || bugtraq,8890 2288 || WEB-PHP Advanced Poll admin_edit.php access || bugtraq,8890 2289 || WEB-PHP Advanced Poll admin_embed.php access || bugtraq,8890 2290 || WEB-PHP Advanced Poll admin_help.php access || bugtraq,8890 2291 || WEB-PHP Advanced Poll admin_license.php access || bugtraq,8890 2292 || WEB-PHP Advanced Poll admin_logout.php access || bugtraq,8890 2293 || WEB-PHP Advanced Poll admin_password.php access || bugtraq,8890 2294 || WEB-PHP Advanced Poll admin_preview.php access || bugtraq,8890 2295 || WEB-PHP Advanced Poll admin_settings.php access || bugtraq,8890 2296 || WEB-PHP Advanced Poll admin_stats.php access || bugtraq,8890 2297 || WEB-PHP Advanced Poll admin_templates_misc.php access || bugtraq,8890 2298 || WEB-PHP Advanced Poll admin_templates.php access || bugtraq,8890 2299 || WEB-PHP Advanced Poll admin_tpl_misc_new.php access || bugtraq,8890 2300 || WEB-PHP Advanced Poll admin_tpl_new.php access || bugtraq,8890 2301 || WEB-PHP Advanced Poll booth.php access || bugtraq,8890 2302 || WEB-PHP Advanced Poll poll_ssi.php access || bugtraq,8890 2303 || WEB-PHP Advanced Poll popup.php access || bugtraq,8890 2304 || WEB-PHP files.inc.php access || bugtraq,8910 2305 || WEB-PHP chatbox.php access || bugtraq,8930 2306 || WEB-PHP gallery arbitrary command execution attempt || bugtraq,8814 || nessus,11876 2307 || WEB-PHP PayPal Storefront arbitrary command execution attempt || bugtraq,8791 || nessus,11873 2308 || NETBIOS SMB DCERPC Workstation Service unicode bind attempt 2309 || NETBIOS SMB DCERPC Workstation Service bind attempt 2310 || NETBIOS SMB DCERPC Workstation Service unicode bind attempt microsoft-ds 2311 || NETBIOS SMB DCERPC Workstation Service bind attempt microsoft-ds 2312 || SHELLCODE x86 0x71FB7BAB NOOP 2313 || SHELLCODE x86 0x71FB7BAB NOOP unicode 2314 || SHELLCODE x86 0x90 NOOP unicode 2315 || NETBIOS DCERPC Workstation Service bind attempt || url,www.microsoft.com/technet/security/bulletin/MS03-049.asp || bugtraq,9011 || cve,CAN-2003-0812 2316 || NETBIOS DCERPC Workstation Service direct service access attempt || url,www.microsoft.com/technet/security/bulletin/MS03-049.asp || bugtraq,9011 || cve,CAN-2003-0812 ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click