[Snort-sigs] Bleedingsnort.com Daily Update

bleeding at ...2727... bleeding at ...2727...
Wed Jun 8 18:02:40 EDT 2005


[***] Results from Oinkmaster started Wed Jun  8 20:00:04 2005 [***]

[///]     Modified active rules:     [///]

 2001807 - BLEEDING-EDGE EXPLOIT CAN-2005-0399 Gif Vuln via http (bleeding-exploit.rules)
 2001972 - BLEEDING-EDGE Behavioral Unusually fast Terminal Server Traffic, Potential Scan or Infection (bleeding-scan.rules)
 2001979 - BLEEDING-EDGE POLICY SSH Server Banner Detected on Unusual Port (bleeding-policy.rules)
 2001980 - BLEEDING-EDGE POLICY SSH Client Banner Detected on Unusual Port (bleeding-policy.rules)
 2001981 - BLEEDING-EDGE POLICY SSHv2 Server KEX Detected on Unusual Port (bleeding-policy.rules)
 2001982 - BLEEDING-EDGE POLICY SSHv2 Client KEX Detected on Unusual Port (bleeding-policy.rules)
 2001983 - BLEEDING-EDGE POLICY SSHv2 Client New Keys Detected on Unusual Port (bleeding-policy.rules)
 2001984 - BLEEDING-EDGE POLICY SSH session in progress on Unusual Port (bleeding-policy.rules)


[///]    Modified inactive rules:    [///]

 2001973 - BLEEDING-EDGE POLICY SSH Server Banner Detected on Expected Port (bleeding-policy.rules)
 2001974 - BLEEDING-EDGE POLICY SSH Client Banner Detected on Expected Port (bleeding-policy.rules)
 2001975 - BLEEDING-EDGE POLICY SSHv2 Server KEX Detected on Expected Port (bleeding-policy.rules)
 2001976 - BLEEDING-EDGE POLICY SSHv2 Client KEX Detected on Expected Port (bleeding-policy.rules)
 2001977 - BLEEDING-EDGE POLICY SSHv2 Client New Keys detected on Expected Port (bleeding-policy.rules)
 2001978 - BLEEDING-EDGE POLICY SSH session in progress on Expected Port (bleeding-policy.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-sid-msg.map (14):
        2001807 || BLEEDING-EDGE EXPLOIT CAN-2005-0399 Gif Vuln via http
        2001972 || BLEEDING-EDGE Behavioral Unusually fast Terminal Server Traffic, Potential Scan or Infection
        2001973 || BLEEDING-EDGE POLICY SSH Server Banner Detected on Expected Port
        2001974 || BLEEDING-EDGE POLICY SSH Client Banner Detected on Expected Port
        2001975 || BLEEDING-EDGE POLICY SSHv2 Server KEX Detected on Expected Port
        2001976 || BLEEDING-EDGE POLICY SSHv2 Client KEX Detected on Expected Port
        2001977 || BLEEDING-EDGE POLICY SSHv2 Client New Keys detected on Expected Port
        2001978 || BLEEDING-EDGE POLICY SSH session in progress on Expected Port
        2001979 || BLEEDING-EDGE POLICY SSH Server Banner Detected on Unusual Port
        2001980 || BLEEDING-EDGE POLICY SSH Client Banner Detected on Unusual Port
        2001981 || BLEEDING-EDGE POLICY SSHv2 Server KEX Detected on Unusual Port
        2001982 || BLEEDING-EDGE POLICY SSHv2 Client KEX Detected on Unusual Port
        2001983 || BLEEDING-EDGE POLICY SSHv2 Client New Keys Detected on Unusual Port
        2001984 || BLEEDING-EDGE POLICY SSH session in progress on Unusual Port

[---]     Removed non-rule lines:    [---]

     -> Removed from bleeding-policy.rules (1):
        var SSH_PORTS 22

     -> Removed from bleeding-sid-msg.map (14):
        2001807 || BLEEDING-EDGE EXPLOIT EXPLOIT CAN-2005-0399 Gif Vuln via http
        2001972 || BLEEDING-EDGE Behavioral Unusual Term Server Traffic, Potential Scan or Infection
        2001973 || BLEEDING-EDGE POLICY SSH Server Banner Detected
        2001974 || BLEEDING-EDGE POLICY SSH Client Banner Detected
        2001975 || BLEEDING-EDGE POLICY SSHv2 Server KEX Detected
        2001976 || BLEEDING-EDGE POLICY SSHv2 Client KEX Detected
        2001977 || BLEEDING-EDGE POLICY SSHv2 Client New Keys detected
        2001978 || BLEEDING-EDGE POLICY SSH session in progress
        2001979 || BLEEDING-EDGE POLICY SSH Server Banner Detected on Off Port
        2001980 || BLEEDING-EDGE POLICY SSH Client Banner Detected on Off Port
        2001981 || BLEEDING-EDGE POLICY SSHv2 Server KEX Detected on Off Port
        2001982 || BLEEDING-EDGE POLICY SSHv2 Client KEX Detected on Off Port
        2001983 || BLEEDING-EDGE POLICY SSHv2 Client New Keys Detected on Off Port
        2001984 || BLEEDING-EDGE POLICY SSH session in progress on Off Port





More information about the Snort-sigs mailing list