[Snort-sigs] Bleedingsnort.com Daily Update

bleeding at ...2727... bleeding at ...2727...
Thu Dec 1 17:01:05 EST 2005


[***] Results from Oinkmaster started Thu Dec  1 20:00:06 2005 [***]

[+++]          Added rules:          [+++]

 2002704 - BLEEDING-EDGE POLICY HTTP - US Confidential ORCON (bleeding-policy.rules)


[///]     Modified active rules:     [///]

 2002682 - BLEEDING-EDGE CURRENT EVENTS Microsoft Internet Explorer Window() Possible Code Execution (bleeding.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-sid-msg.map (1):
        2002704 || BLEEDING-EDGE POLICY HTTP - US Confidential ORCON

[---]     Removed non-rule lines:    [---]

     -> Removed from bleeding-policy.rules (1):
        #alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY HTTP - US Confidential ORCON"; flow:to_server,established; pcre:"/(CONFIDENTIAL|C)//[\s\w,/-]*(ORIGINATOR\sCONTROLLED|ORCON)[\s\w,/-]*(?=//(25)?X[1-9])/ism"; classtype:policy-violation;)





More information about the Snort-sigs mailing list