[Snort-sigs] Community Rule Update

Alex Kirk alex.kirk at ...435...
Tue Apr 5 12:29:15 EDT 2005


This message is to announce the availability of an update for the 
Sourcefire community rule set, which can be downloaded free of cost or 
registration from http://www.snort.org/pub-bin/downloads.cgi.

This release incorporates suggested changes for SID 100000132, as well 
as updated documentation discussing the possibility of using var 
KNOWN_PROXY_SERVERS with that rule. Additionally, new SID 100000133 
covers a denial of service for the Xeneo web server.

As with all Snort rulesets, comments and questions are welcome. Users 
who wish to submit their own rules may do so at 
http://www.snort.org/reg-bin/rulesubmit.cgi.

Alex Kirk
Community Rules Maintainer/
Research Analyst
Sourcefire, Inc.

----------------------------------------------------------------------
New Rule:

100000133 || COMMUNITY WEB-DoS Xeneo Server Question Mark GET Request || 
bugtraq,7398 || 
url,www.northernsolutions.com/support/index.php?view=support&cmd=releasenotes&productid=1

Updated Rule:

100000132 || COMMUNITY WEB-MISC Proxy Server Access
----------------------------------------------------------------------




More information about the Snort-sigs mailing list