[Snort-sigs] Bleedingsnort.com Daily Update

matt at ...2436... matt at ...2436...
Sat Aug 14 06:01:01 EDT 2004


Todays changes from Bleedingsnort.com:

[***] Results from Oinkmaster started Sat Aug 14 08:00:02 2004 [***]

[+++]          Added rules:          [+++]

     -> Added to bleeding.rules (1):
        alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"BLEEDING-EDGE AOL Instant Messenger aim goaway URI Handler"; uricontent:"aim\:goaway?message="; reference:www.idefense.com/application/poi/display?id=121; classtype:misc-activity; sid:2001189; rev:2;)

[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-sid-msg.map (1):
        2001189 || BLEEDING-EDGE AOL Instant Messenger aim goaway URI Handler || www.idefense.com/application/poi/display?id=121

     -> Added to bleeding.rules (1):
        #Submitted by Philippe Caturegli

[*] Added files: [*]
    None.





More information about the Snort-sigs mailing list