[Snort-sigs] Bleedingsnort.com Daily Update

bleeding at ...2727... bleeding at ...2727...
Tue Dec 20 17:01:01 EST 2005


[***] Results from Oinkmaster started Tue Dec 20 20:00:06 2005 [***]

[+++]          Added rules:          [+++]

 2002729 - BLEEDING-EDGE POLICY Outbound Hamachi VPN Connection Attempt (bleeding-policy.rules)


[///]     Modified active rules:     [///]

 2002681 - BLEEDING-EDGE WEB Mambo Exploit (bleeding-web.rules)
 2002727 - BLEEDING_EDGE VIRUS Bagle.gen SMTP Outbound (aka - .BK,.ET,.FT,.JH,Lodear.E,.gen,Mitglieder.GU) (bleeding-virus.rules)


[///]    Modified inactive rules:    [///]

 2002726 - BLEEDING_EDGE VIRUS Bagle.gen SMTP Inbound (aka - .BK,.ET,.FT,.JH,Lodear.E,.gen,Mitglieder.GU) (bleeding-virus.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-policy.rules (1):
        #by Dajackman

     -> Added to bleeding-sid-msg.map (2):
        2002681 || BLEEDING-EDGE WEB Mambo Exploit || url,isc.sans.org/diary.php?storyid=869 || url,seclists.org/lists/fulldisclosure/2005/Nov/0528.html
        2002729 || BLEEDING-EDGE POLICY Outbound Hamachi VPN Connection Attempt || url,www.hamachi.cc

     -> Added to bleeding-web.rules (1):
        #matt jonkman, info from SANS. Updated by J Hewlett

[---]     Removed non-rule lines:    [---]

     -> Removed from bleeding-sid-msg.map (1):
        2002681 || BLEEDING-EDGE EXPLOIT Mambo Exploit || url,isc.sans.org/diary.php?storyid=869 || url,seclists.org/lists/fulldisclosure/2005/Nov/0528.html

     -> Removed from bleeding-web.rules (1):
        #matt jonkman, info from SANS





More information about the Snort-sigs mailing list