[Snort-sigs] Bleedingsnort.com Daily Update

matt at ...2436... matt at ...2436...
Tue Aug 17 15:48:13 EDT 2004


Todays changes from Bleedingsnort.com:

[***] Results from Oinkmaster started Tue Aug 17 08:00:02 2004 [***]

[///]     Modified active rules:     [///]

     -> Modified active in bleeding.rules (1):
        old: alert tcp $HOME_NET any -> $EXTERNAL_NET 25 (msg:"BLEEDING-EDGE WORM MyDoom.S Outbound"; content:"LOL!;))))"; nocase; content:"filename=photos_arc.exe"; nocase; reference:url,www.f-secure.com/v-descs/mydoom_s.shtml; reference:url,isc.sans.org/diary.php?date=2004-08-16; sid:2001196; rev:1;)
        new: alert tcp $HOME_NET any -> $EXTERNAL_NET 25 (msg:"BLEEDING-EDGE WORM MyDoom.S Outbound"; content:"LOL!\;)"; nocase; content:"filename=photos_arc.exe"; nocase; reference:url,www.f-secure.com/v-descs/mydoom_s.shtml; reference:url,isc.sans.org/diary.php?date=2004-08-16; sid:2001196; rev:2;)

[*] Non-rule line modifications: [*]
    None.

[*] Added files: [*]
    None.





More information about the Snort-sigs mailing list