[Snort-sigs] Bleedingsnort.com Daily Update

matt at ...2436... matt at ...2436...
Fri Aug 20 18:01:02 EDT 2004


Todays changes from Bleedingsnort.com:

[***] Results from Oinkmaster started Fri Aug 20 20:00:01 2004 [***]

[---]         Disabled rules:        [---]

     -> Disabled in bleeding.rules (1):
        #alert tcp any any -> any any (msg:"BLEEDING-EDGE Serv-U MDTM Command Buffer Overflow Vulnerability"; pcre:"/MDTM[\s]+[\d]+[\s\S]*[\w]{45}/Bi"; reference:url,www.securiteam.com/windowsntfocus/5HP010ACAS.html; classtype:misc-activity; sid:2001214; rev:1;)

[---]     Removed non-rule lines:    [---]

     -> Removed from bleeding-sid-msg.map (1):
        2001214 || BLEEDING-EDGE Serv-U MDTM Command Buffer Overflow Vulnerability || url,www.securiteam.com/windowsntfocus/5HP010ACAS.html

[*] Added files: [*]
    None.





More information about the Snort-sigs mailing list