[Snort-sigs] Santy/phpBB rules

Frank Knobbe frank at ...1978...
Tue Dec 21 17:23:18 EST 2004


On Tue, 2004-12-21 at 20:00 -0500, M. Shirk wrote:
> I have updated the two bleeding snort rules and added the third rule based 
> on some of the web server logs floating around. Correct them if you see any 
> errors and submit them to me or bleedingsnort.

These rules already had been updated. The rule that checks for
fwrite(fopen has also already been committed, with SID 2001604.

Please check the current bleeding rules (an Oinkmaster update hit
Snort-Sigs a couple hours ago). If you see any errors in those, please
let us know.

Thanks,
Frank






More information about the Snort-sigs mailing list