[Snort-sigs] Bleedingsnort.com Daily Update

bleeding at ...2727... bleeding at ...2727...
Fri Mar 11 17:28:26 EST 2005


[***] Results from Oinkmaster started Fri Mar 11 20:00:05 2005 [***]

[+++]          Added rules:          [+++]

 2001782 - BLEEDING-EDGE MALWARE DUST Spyworm Install (bleeding-malware.rules)
 2001783 - BLEEDING-EDGE MALWARE Media Pass ActiveX Install (bleeding-malware.rules)
 2001784 - BLEEDING-EDGE EXPLOIT AWStats (awstats_shell) Remote Code Execution (bleeding-exploit.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-exploit.rules (1):
        #Mark Tombaugh

     -> Added to bleeding-malware.rules (2):
        #From Mark Tombaugh, ISC
        #Mark Tombaugh

     -> Added to bleeding-sid-msg.map (3):
        2001782 || BLEEDING-EDGE MALWARE DUST Spyworm Install || url,isc.sans.org/diary.php?date=2005-03-10
        2001783 || BLEEDING-EDGE MALWARE Media Pass ActiveX Install || url,static.windupdates.com/Release/v19/Info.txt || url,www.benedelman.org/news/010205-1.html
        2001784 || BLEEDING-EDGE EXPLOIT AWStats (awstats_shell) Remote Code Execution || url,awstats.sourceforge.net || url,www.k-otik.com/exploits/20050302.awstats_shell.c.php





More information about the Snort-sigs mailing list