[Snort-sigs] Bleedingsnort.com Daily Update

bleeding at ...2727... bleeding at ...2727...
Wed Mar 9 17:04:53 EST 2005


[***] Results from Oinkmaster started Wed Mar  9 20:00:11 2005 [***]

[+++]          Added rules:          [+++]

 2001763 - BLEEDING-EDGE VIRUS - W32.Opaserv Worm Infection (bleeding-virus.rules)
 2001764 - BLEEDING-EDGE VIRUS - Bugbear at ...871... virus in SMTP (bleeding-virus.rules)
 2001765 - BLEEDING-EDGE VIRUS - BugBear at ...871... virus in Network share (bleeding-virus.rules)
 2001766 - BLEEDING-EDGE VIRUS - BugBear at ...871... Worm Copied to Startup Folder (bleeding-virus.rules)
 2001767 - BLEEDING-EDGE WEB ORACLE OLEDB asp error (bleeding-web.rules)
 2001768 - BLEEDING-EDGE WEB MS SQL Server OLEDB asp error (bleeding-web.rules)
 2001780 - BLEEDING-EDGE EXPLOIT Solaris TTYPROMPT environment variable set (bleeding-exploit.rules)
 2001781 - BLEEDING-EDGE WEB ORACLE rwcgi60 information leak attempt (bleeding-web.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-exploit.rules (1):
        #submitted by bdoctor

     -> Added to bleeding-sid-msg.map (8):
        2001763 || BLEEDING-EDGE VIRUS - W32.Opaserv Worm Infection || url,www.sarc.com/avcenter/venc/data/w32.opaserv.worm.html
        2001764 || BLEEDING-EDGE VIRUS - Bugbear at ...871... virus in SMTP || url,www.symantec.com/avcenter/venc/data/w32.bugbear at ...1512...
        2001765 || BLEEDING-EDGE VIRUS - BugBear at ...871... virus in Network share || url,www.symantec.com/avcenter/venc/data/w32.bugbear at ...1512...
        2001766 || BLEEDING-EDGE VIRUS - BugBear at ...871... Worm Copied to Startup Folder || url,www.symantec.com/avcenter/venc/data/w32.bugbear at ...1512...
        2001767 || BLEEDING-EDGE WEB ORACLE OLEDB asp error || url,www.wiretrip.net/rfp/p/doc.asp/i2/d42.htm
        2001768 || BLEEDING-EDGE WEB MS SQL Server OLEDB asp error || url,www.wiretrip.net/rfp/p/doc.asp/i2/d42.htm
        2001780 || BLEEDING-EDGE EXPLOIT Solaris TTYPROMPT environment variable set || url,online.securityfocus.com/archive/1/293844
        2001781 || BLEEDING-EDGE WEB ORACLE rwcgi60 information leak attempt || url,www.kb.cert.org/vuls/id/997403

     -> Added to bleeding-virus.rules (4):
        #	BugBear
        #Submitted by Brad Doctor, 3/8/2005, for BugBear at ...871...
        #	OpaServ Worm
        #Submitted by Brad Doctor, 3/8/2005, for Opaserv

     -> Added to bleeding-web.rules (2):
        #Submitted by bdoctor
        #Submited by bdoctor





More information about the Snort-sigs mailing list