[Snort-sigs] snort-rules update @ Tue Mar 1 14:02:00 2005

bmc at ...95... bmc at ...95...
Tue Mar 1 11:03:32 EST 2005


New rules:
3147 - TELNET login buffer overflow attempt (telnet.rules, requires 2.2 or later)
3148 - WEB-CLIENT winhelp clsid attempt (web-client.rules, requires 2.1 or later)
3149 - WEB-CLIENT object type overflow attempt (web-client.rules, requires 2.1 or later)
3150 - WEB-IIS SQLXML content type overflow (web-iis.rules, requires 2.1 or later)
3151 - FINGER / execution attempt (finger.rules, requires 2.1 or later)
3152 - MS-SQL sa brute force login attempt (sql.rules, requires 2.1 or later)
3153 - DNS TCP inverse query overflow (dns.rules, requires 2.1 or later)
3154 - DNS UDP inverse query overflow (dns.rules, requires 2.1 or later)
3155 - BACKDOOR BackOrifice 2000 Inbound Traffic (backdoor.rules)
3156 - NETBIOS DCERPC msqueue bind attempt (netbios.rules, requires 2.2 or later)
3157 - NETBIOS DCERPC msqueue little endian bind attempt (netbios.rules, requires 2.2 or later)
3158 - NETBIOS DCERPC CoGetInstanceFromFile little endian overflow attempt (netbios.rules, requires 2.2 or later)
3159 - NETBIOS DCERPC CoGetInstanceFromFile overflow attempt (netbios.rules, requires 2.2 or later)
3160 - NETBIOS SMB msqueue bind attempt (netbios.rules, requires 2.2 or later)
3161 - NETBIOS SMB msqueue little endian bind attempt (netbios.rules, requires 2.2 or later)
3162 - NETBIOS SMB msqueue unicode bind attempt (netbios.rules, requires 2.2 or later)
3163 - NETBIOS SMB msqueue unicode little endian bind attempt (netbios.rules, requires 2.2 or later)
3164 - NETBIOS SMB msqueue andx bind attempt (netbios.rules, requires 2.2 or later)
3165 - NETBIOS SMB msqueue little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3166 - NETBIOS SMB msqueue unicode andx bind attempt (netbios.rules, requires 2.2 or later)
3167 - NETBIOS SMB msqueue unicode little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3168 - NETBIOS SMB-DS msqueue bind attempt (netbios.rules, requires 2.2 or later)
3169 - NETBIOS SMB-DS msqueue little endian bind attempt (netbios.rules, requires 2.2 or later)
3170 - NETBIOS SMB-DS msqueue unicode bind attempt (netbios.rules, requires 2.2 or later)
3171 - NETBIOS SMB-DS msqueue unicode little endian bind attempt (netbios.rules, requires 2.2 or later)
3172 - NETBIOS SMB-DS msqueue andx bind attempt (netbios.rules, requires 2.2 or later)
3173 - NETBIOS SMB-DS msqueue little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3174 - NETBIOS SMB-DS msqueue unicode andx bind attempt (netbios.rules, requires 2.2 or later)
3175 - NETBIOS SMB-DS msqueue unicode little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3176 - NETBIOS SMB CoGetInstanceFromFile overflow attempt (netbios.rules, requires 2.2 or later)
3177 - NETBIOS SMB CoGetInstanceFromFile little endian overflow attempt (netbios.rules, requires 2.2 or later)
3178 - NETBIOS SMB CoGetInstanceFromFile unicode overflow attempt (netbios.rules, requires 2.2 or later)
3179 - NETBIOS SMB CoGetInstanceFromFile unicode little endian overflow attempt (netbios.rules, requires 2.2 or later)
3180 - NETBIOS SMB CoGetInstanceFromFile andx overflow attempt (netbios.rules, requires 2.2 or later)
3181 - NETBIOS SMB CoGetInstanceFromFile little endian andx overflow attempt (netbios.rules, requires 2.2 or later)
3182 - NETBIOS SMB CoGetInstanceFromFile unicode andx overflow attempt (netbios.rules, requires 2.2 or later)
3183 - NETBIOS SMB CoGetInstanceFromFile unicode little endian andx overflow attempt (netbios.rules, requires 2.2 or later)
3184 - NETBIOS SMB-DS CoGetInstanceFromFile overflow attempt (netbios.rules, requires 2.2 or later)
3185 - NETBIOS SMB-DS CoGetInstanceFromFile little endian overflow attempt (netbios.rules, requires 2.2 or later)
3186 - NETBIOS SMB-DS CoGetInstanceFromFile unicode overflow attempt (netbios.rules, requires 2.2 or later)
3187 - NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian overflow attempt (netbios.rules, requires 2.2 or later)
3188 - NETBIOS SMB-DS CoGetInstanceFromFile andx overflow attempt (netbios.rules, requires 2.2 or later)
3189 - NETBIOS SMB-DS CoGetInstanceFromFile little endian andx overflow attempt (netbios.rules, requires 2.2 or later)
3190 - NETBIOS SMB-DS CoGetInstanceFromFile unicode andx overflow attempt (netbios.rules, requires 2.2 or later)
3191 - NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian andx overflow attempt (netbios.rules, requires 2.2 or later)
3192 - WEB-CLIENT Windows Media Player directory traversal via Content-Disposition attempt (web-client.rules, requires 2.1 or later)
3193 - WEB-IIS .cmd executable file parsing attack (web-iis.rules, requires 2.1 or later)
3194 - WEB-IIS .bat executable file parsing attack (web-iis.rules, requires 2.1 or later)
3195 - NETBIOS name query overflow attempt TCP (netbios.rules, requires 2.1 or later)
3196 - NETBIOS name query overflow attempt UDP (netbios.rules, requires 2.1 or later)
3197 - NETBIOS DCERPC ISystemActivator path overflow attempt little endian (netbios.rules, requires 2.2 or later)
3198 - NETBIOS DCERPC ISystemActivator path overflow attempt big endian (netbios.rules, requires 2.2 or later)
3199 - EXPLOIT WINS name query overflow attempt TCP (exploit.rules, requires 2.1 or later)
3200 - EXPLOIT WINS name query overflow attempt UDP (exploit.rules, requires 2.1 or later)
3201 - WEB-IIS httpodbc.dll access - nimda (web-iis.rules)
3202 - NETBIOS SMB winreg bind attempt (netbios.rules, requires 2.2 or later)
3203 - NETBIOS SMB winreg little endian bind attempt (netbios.rules, requires 2.2 or later)
3204 - NETBIOS SMB winreg unicode bind attempt (netbios.rules, requires 2.2 or later)
3205 - NETBIOS SMB winreg unicode little endian bind attempt (netbios.rules, requires 2.2 or later)
3206 - NETBIOS SMB winreg andx bind attempt (netbios.rules, requires 2.2 or later)
3207 - NETBIOS SMB winreg little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3208 - NETBIOS SMB winreg unicode andx bind attempt (netbios.rules, requires 2.2 or later)
3209 - NETBIOS SMB winreg unicode little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3210 - NETBIOS SMB-DS winreg bind attempt (netbios.rules, requires 2.2 or later)
3211 - NETBIOS SMB-DS winreg little endian bind attempt (netbios.rules, requires 2.2 or later)
3212 - NETBIOS SMB-DS winreg unicode bind attempt (netbios.rules, requires 2.2 or later)
3213 - NETBIOS SMB-DS winreg unicode little endian bind attempt (netbios.rules, requires 2.2 or later)
3214 - NETBIOS SMB-DS winreg andx bind attempt (netbios.rules, requires 2.2 or later)
3215 - NETBIOS SMB-DS winreg little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3216 - NETBIOS SMB-DS winreg unicode andx bind attempt (netbios.rules, requires 2.2 or later)
3217 - NETBIOS SMB-DS winreg unicode little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3218 - NETBIOS SMB OpenKey overflow attempt (netbios.rules, requires 2.2 or later)
3219 - NETBIOS SMB OpenKey little endian overflow attempt (netbios.rules, requires 2.2 or later)
3220 - NETBIOS SMB OpenKey unicode overflow attempt (netbios.rules, requires 2.2 or later)
3221 - NETBIOS SMB OpenKey unicode little endian overflow attempt (netbios.rules, requires 2.2 or later)
3222 - NETBIOS SMB OpenKey andx overflow attempt (netbios.rules, requires 2.2 or later)
3223 - NETBIOS SMB OpenKey little endian andx overflow attempt (netbios.rules, requires 2.2 or later)
3224 - NETBIOS SMB OpenKey unicode andx overflow attempt (netbios.rules, requires 2.2 or later)
3225 - NETBIOS SMB OpenKey unicode little endian andx overflow attempt (netbios.rules, requires 2.2 or later)
3226 - NETBIOS SMB-DS OpenKey overflow attempt (netbios.rules, requires 2.2 or later)
3227 - NETBIOS SMB-DS OpenKey little endian overflow attempt (netbios.rules, requires 2.2 or later)
3228 - NETBIOS SMB-DS OpenKey unicode overflow attempt (netbios.rules, requires 2.2 or later)
3229 - NETBIOS SMB-DS OpenKey unicode little endian overflow attempt (netbios.rules, requires 2.2 or later)
3230 - NETBIOS SMB-DS OpenKey andx overflow attempt (netbios.rules, requires 2.2 or later)
3231 - NETBIOS SMB-DS OpenKey little endian andx overflow attempt (netbios.rules, requires 2.2 or later)
3232 - NETBIOS SMB-DS OpenKey unicode andx overflow attempt (netbios.rules, requires 2.2 or later)
3233 - NETBIOS SMB-DS OpenKey unicode little endian andx overflow attempt (netbios.rules, requires 2.2 or later)
3234 - NETBIOS Messenger message little endian overflow attempt (netbios.rules)
3235 - NETBIOS Messenger message overflow attempt (netbios.rules)
3236 - NETBIOS DCERPC irot bind attempt (netbios.rules, requires 2.2 or later)
3237 - NETBIOS DCERPC irot little endian bind attempt (netbios.rules, requires 2.2 or later)
3238 - NETBIOS DCERPC IrotIsRunning attempt (netbios.rules, requires 2.2 or later)
3239 - NETBIOS DCERPC IrotIsRunning little endian attempt (netbios.rules, requires 2.2 or later)
3240 - NETBIOS SMB irot bind attempt (netbios.rules, requires 2.2 or later)
3241 - NETBIOS SMB irot little endian bind attempt (netbios.rules, requires 2.2 or later)
3242 - NETBIOS SMB irot unicode bind attempt (netbios.rules, requires 2.2 or later)
3243 - NETBIOS SMB irot unicode little endian bind attempt (netbios.rules, requires 2.2 or later)
3244 - NETBIOS SMB irot andx bind attempt (netbios.rules, requires 2.2 or later)
3245 - NETBIOS SMB irot little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3246 - NETBIOS SMB irot unicode andx bind attempt (netbios.rules, requires 2.2 or later)
3247 - NETBIOS SMB irot unicode little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3248 - NETBIOS SMB-DS irot bind attempt (netbios.rules, requires 2.2 or later)
3249 - NETBIOS SMB-DS irot little endian bind attempt (netbios.rules, requires 2.2 or later)
3250 - NETBIOS SMB-DS irot unicode bind attempt (netbios.rules, requires 2.2 or later)
3251 - NETBIOS SMB-DS irot unicode little endian bind attempt (netbios.rules, requires 2.2 or later)
3252 - NETBIOS SMB-DS irot andx bind attempt (netbios.rules, requires 2.2 or later)
3253 - NETBIOS SMB-DS irot little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3254 - NETBIOS SMB-DS irot unicode andx bind attempt (netbios.rules, requires 2.2 or later)
3255 - NETBIOS SMB-DS irot unicode little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3256 - NETBIOS SMB IrotIsRunning attempt (netbios.rules, requires 2.2 or later)
3257 - NETBIOS SMB IrotIsRunning little endian attempt (netbios.rules, requires 2.2 or later)
3258 - NETBIOS SMB IrotIsRunning unicode attempt (netbios.rules, requires 2.2 or later)
3259 - NETBIOS SMB IrotIsRunning unicode little endian attempt (netbios.rules, requires 2.2 or later)
3260 - NETBIOS SMB IrotIsRunning andx attempt (netbios.rules, requires 2.2 or later)
3261 - NETBIOS SMB IrotIsRunning little endian andx attempt (netbios.rules, requires 2.2 or later)
3262 - NETBIOS SMB IrotIsRunning unicode andx attempt (netbios.rules, requires 2.2 or later)
3263 - NETBIOS SMB IrotIsRunning unicode little endian andx attempt (netbios.rules, requires 2.2 or later)
3264 - NETBIOS SMB-DS IrotIsRunning attempt (netbios.rules, requires 2.2 or later)
3265 - NETBIOS SMB-DS IrotIsRunning little endian attempt (netbios.rules, requires 2.2 or later)
3266 - NETBIOS SMB-DS IrotIsRunning unicode attempt (netbios.rules, requires 2.2 or later)
3267 - NETBIOS SMB-DS IrotIsRunning unicode little endian attempt (netbios.rules, requires 2.2 or later)
3268 - NETBIOS SMB-DS IrotIsRunning andx attempt (netbios.rules, requires 2.2 or later)
3269 - NETBIOS SMB-DS IrotIsRunning little endian andx attempt (netbios.rules, requires 2.2 or later)
3270 - NETBIOS SMB-DS IrotIsRunning unicode andx attempt (netbios.rules, requires 2.2 or later)
3271 - NETBIOS SMB-DS IrotIsRunning unicode little endian andx attempt (netbios.rules, requires 2.2 or later)
3272 - BACKDOOR mydoom.a backdoor upload/execute attempt (backdoor.rules)
3273 - MS-SQL sa brute force login unicode attempt (sql.rules, requires 2.1 or later)
3274 - TELNET login buffer non-evasive overflow attempt (telnet.rules, requires 2.2 or later)
3275 - NETBIOS DCERPC IActivation bind attempt (netbios.rules, requires 2.2 or later)
3276 - NETBIOS DCERPC IActivation little endian bind attempt (netbios.rules, requires 2.2 or later)
3377 - NETBIOS SMB IActivation bind attempt (netbios.rules, requires 2.2 or later)
3378 - NETBIOS SMB IActivation little endian bind attempt (netbios.rules, requires 2.2 or later)
3379 - NETBIOS SMB IActivation unicode bind attempt (netbios.rules, requires 2.2 or later)
3380 - NETBIOS SMB IActivation unicode little endian bind attempt (netbios.rules, requires 2.2 or later)
3381 - NETBIOS SMB IActivation andx bind attempt (netbios.rules, requires 2.2 or later)
3382 - NETBIOS SMB IActivation little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3383 - NETBIOS SMB IActivation unicode andx bind attempt (netbios.rules, requires 2.2 or later)
3384 - NETBIOS SMB IActivation unicode little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3385 - NETBIOS SMB-DS IActivation bind attempt (netbios.rules, requires 2.2 or later)
3386 - NETBIOS SMB-DS IActivation little endian bind attempt (netbios.rules, requires 2.2 or later)
3387 - NETBIOS SMB-DS IActivation unicode bind attempt (netbios.rules, requires 2.2 or later)
3388 - NETBIOS SMB-DS IActivation unicode little endian bind attempt (netbios.rules, requires 2.2 or later)
3389 - NETBIOS SMB-DS IActivation andx bind attempt (netbios.rules, requires 2.2 or later)
3390 - NETBIOS SMB-DS IActivation little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3391 - NETBIOS SMB-DS IActivation unicode andx bind attempt (netbios.rules, requires 2.2 or later)
3392 - NETBIOS SMB-DS IActivation unicode little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3393 - NETBIOS SMB ISystemActivator bind attempt (netbios.rules, requires 2.2 or later)
3394 - NETBIOS SMB ISystemActivator little endian bind attempt (netbios.rules, requires 2.2 or later)
3395 - NETBIOS SMB ISystemActivator unicode bind attempt (netbios.rules, requires 2.2 or later)
3396 - NETBIOS SMB ISystemActivator unicode little endian bind attempt (netbios.rules, requires 2.2 or later)
3397 - NETBIOS SMB ISystemActivator andx bind attempt (netbios.rules, requires 2.2 or later)
3398 - NETBIOS SMB ISystemActivator little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3399 - NETBIOS SMB ISystemActivator unicode andx bind attempt (netbios.rules, requires 2.2 or later)
3400 - NETBIOS SMB ISystemActivator unicode little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3401 - NETBIOS SMB-DS ISystemActivator bind attempt (netbios.rules, requires 2.2 or later)
3402 - NETBIOS SMB-DS ISystemActivator little endian bind attempt (netbios.rules, requires 2.2 or later)
3403 - NETBIOS SMB-DS ISystemActivator unicode bind attempt (netbios.rules, requires 2.2 or later)
3404 - NETBIOS SMB-DS ISystemActivator unicode little endian bind attempt (netbios.rules, requires 2.2 or later)
3405 - NETBIOS SMB-DS ISystemActivator andx bind attempt (netbios.rules, requires 2.2 or later)
3406 - NETBIOS SMB-DS ISystemActivator little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3407 - NETBIOS SMB-DS ISystemActivator unicode andx bind attempt (netbios.rules, requires 2.2 or later)
3408 - NETBIOS SMB-DS ISystemActivator unicode little endian andx bind attempt (netbios.rules, requires 2.2 or later)
3409 - NETBIOS SMB RemoteActivation attempt (netbios.rules, requires 2.2 or later)
3410 - NETBIOS SMB RemoteActivation little endian attempt (netbios.rules, requires 2.2 or later)
3411 - NETBIOS SMB RemoteActivation unicode attempt (netbios.rules, requires 2.2 or later)
3412 - NETBIOS SMB RemoteActivation unicode little endian attempt (netbios.rules, requires 2.2 or later)
3413 - NETBIOS SMB RemoteActivation andx attempt (netbios.rules, requires 2.2 or later)
3414 - NETBIOS SMB RemoteActivation little endian andx attempt (netbios.rules, requires 2.2 or later)
3415 - NETBIOS SMB RemoteActivation unicode andx attempt (netbios.rules, requires 2.2 or later)
3416 - NETBIOS SMB RemoteActivation unicode little endian andx attempt (netbios.rules, requires 2.2 or later)
3417 - NETBIOS SMB-DS RemoteActivation attempt (netbios.rules, requires 2.2 or later)
3418 - NETBIOS SMB-DS RemoteActivation little endian attempt (netbios.rules, requires 2.2 or later)
3419 - NETBIOS SMB-DS RemoteActivation unicode attempt (netbios.rules, requires 2.2 or later)
3420 - NETBIOS SMB-DS RemoteActivation unicode little endian attempt (netbios.rules, requires 2.2 or later)
3421 - NETBIOS SMB-DS RemoteActivation andx attempt (netbios.rules, requires 2.2 or later)
3422 - NETBIOS SMB-DS RemoteActivation little endian andx attempt (netbios.rules, requires 2.2 or later)
3423 - NETBIOS SMB-DS RemoteActivation unicode andx attempt (netbios.rules, requires 2.2 or later)
3424 - NETBIOS SMB-DS RemoteActivation unicode little endian andx attempt (netbios.rules, requires 2.2 or later)
3425 - NETBIOS SMB CoGetInstanceFromFile attempt (netbios.rules, requires 2.2 or later)
3426 - NETBIOS SMB CoGetInstanceFromFile little endian attempt (netbios.rules, requires 2.2 or later)
3427 - NETBIOS SMB CoGetInstanceFromFile unicode attempt (netbios.rules, requires 2.2 or later)
3428 - NETBIOS SMB CoGetInstanceFromFile unicode little endian attempt (netbios.rules, requires 2.2 or later)
3429 - NETBIOS SMB CoGetInstanceFromFile andx attempt (netbios.rules, requires 2.2 or later)
3430 - NETBIOS SMB CoGetInstanceFromFile little endian andx attempt (netbios.rules, requires 2.2 or later)
3431 - NETBIOS SMB CoGetInstanceFromFile unicode andx attempt (netbios.rules, requires 2.2 or later)
3432 - NETBIOS SMB CoGetInstanceFromFile unicode little endian andx attempt (netbios.rules, requires 2.2 or later)
3433 - NETBIOS SMB-DS CoGetInstanceFromFile attempt (netbios.rules, requires 2.2 or later)
3434 - NETBIOS SMB-DS CoGetInstanceFromFile little endian attempt (netbios.rules, requires 2.2 or later)
3435 - NETBIOS SMB-DS CoGetInstanceFromFile unicode attempt (netbios.rules, requires 2.2 or later)
3436 - NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian attempt (netbios.rules, requires 2.2 or later)
3437 - NETBIOS SMB-DS CoGetInstanceFromFile andx attempt (netbios.rules, requires 2.2 or later)
3438 - NETBIOS SMB-DS CoGetInstanceFromFile little endian andx attempt (netbios.rules, requires 2.2 or later)
3439 - NETBIOS SMB-DS CoGetInstanceFromFile unicode andx attempt (netbios.rules, requires 2.2 or later)
3440 - NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian andx attempt (netbios.rules, requires 2.2 or later)
3442 - DOS WIN32 TCP print service denial of service attempt (dos.rules)
3443 - MS-SQL DNS query with 1 requests (sql.rules, requires 2.2 or later)
3444 - MS-SQL DNS query with 2 requests (sql.rules, requires 2.2 or later)
3445 - MS-SQL DNS query with 3 requests (sql.rules, requires 2.2 or later)
3446 - MS-SQL DNS query with 4 requests (sql.rules, requires 2.2 or later)
3447 - MS-SQL DNS query with 5 requests (sql.rules, requires 2.2 or later)
3448 - MS-SQL DNS query with 6 requests (sql.rules, requires 2.2 or later)
3449 - MS-SQL DNS query with 7 requests (sql.rules, requires 2.2 or later)
3450 - MS-SQL DNS query with 8 requests (sql.rules, requires 2.2 or later)
3451 - MS-SQL DNS query with 9 requests (sql.rules, requires 2.2 or later)
3452 - MS-SQL DNS query with 10 requests (sql.rules, requires 2.2 or later)
3453 - MISC Arkeia client backup system info probe (misc.rules, requires 2.1 or later)
3454 - MISC Arkeia client backup generic info probe (misc.rules)
3455 - EXPLOIT Bontago Game Server Nickname Buffer Overflow (exploit.rules, requires 2.1 or later)
3456 - MYSQL 4.0 root login attempt (mysql.rules)
3457 - EXPLOIT Arkeia backup client type 77 overflow attempt (exploit.rules, requires 2.1 or later)
3458 - EXPLOIT Arkeia backup client type 84 overflow attempt (exploit.rules, requires 2.1 or later)

Updated rules:
 271 - DOS UDP echo+chargen bomb (dos.rules)
 272 - DOS IGMP dos attack (dos.rules)
 273 - DOS IGMP dos attack (dos.rules)
 279 - DOS Bay/Nortel Nautica Marlin (dos.rules)
 522 - MISC Tiny Fragments (misc.rules)
1377 - FTP wu-ftp bad file completion attempt [ (ftp.rules)
1378 - FTP wu-ftp bad file completion attempt { (ftp.rules)
1550 - SMTP ETRN overflow attempt (smtp.rules, requires 2.1 or later)
1970 - WEB-IIS MDAC Content-Type overflow attempt (web-iis.rules, requires 2.1 or later)
2050 - MS-SQL version overflow attempt (sql.rules, requires 2.2 or later)
2351 - NETBIOS DCERPC ISystemActivator path overflow attempt little endian unicode (netbios.rules, requires 2.2 or later)
2446 - EXPLOIT ICQ SRV_MULTI/SRV_META_USER overflow attempt (exploit.rules)
2590 - SMTP MAIL FROM overflow attempt (smtp.rules, requires 2.1 or later)
3017 - EXPLOIT WINS overflow attempt (exploit.rules, requires 2.1 or later)
3132 - WEB-CLIENT PNG large image width download attempt (web-client.rules)
3133 - WEB-CLIENT PNG large image height download attempt (web-client.rules)
3134 - WEB-CLIENT PNG large colour depth download attempt (web-client.rules)





More information about the Snort-sigs mailing list