[Snort-sigs] Snort Community Rules Update

Sourcefire VRT research at ...435...
Fri Jun 2 16:05:45 EDT 2006


This message is to announce the availability of an update for the 
Sourcefire community rule set, which can be downloaded free of cost or 
registration from http://www.snort.org/pub-bin/downloads.cgi.

New rules in this release are identified as SIDs 100000317-100000386. 
This update includes rules which a variety of attacks against several 
different web applications.

A list of modified rules and their SIDs follows.

Alex Kirk
Community Rules Maintainer
Sourcefire, Inc.


100000317 || COMMUNITY WEB-MISC phpBazar classified_right.php remote 
file include
100000318 || COMMUNITY WEB-MISC phpBazar admin.php remote file include
100000319 || COMMUNITY WEB-MISC ActualScripts direct.php remote file include
100000320 || COMMUNITY WEB-MISC ScozNet ScozNews functions.php remote 
file include
100000321 || COMMUNITY WEB-MISC ScozNet ScozNews help.php remote file 
include
100000322 || COMMUNITY WEB-MISC ScozNet ScozNews mail.php remote file 
include
100000323 || COMMUNITY WEB-MISC ScozNet ScozNews news.php remote file 
include
100000324 || COMMUNITY WEB-MISC ScozNet ScozNews template.php remote 
file include
100000325 || COMMUNITY WEB-MISC ScozNet ScozNews admin_cats.php remote 
file include
100000326 || COMMUNITY WEB-MISC ScozNet ScozNews admin_edit.php remote 
file include
100000327 || COMMUNITY WEB-MISC ScozNet ScozNews admin_import.php remote 
file include
100000328 || COMMUNITY WEB-MISC ScozNet ScozNews admin_templates.php 
remote file include
100000329 || COMMUNITY WEB-MISC Invision Power Board class_post.php 
remote file include
100000330 || COMMUNITY WEB-MISC Invision Power Board moderate.php remote 
file include
100000331 || COMMUNITY WEB-MISC ZixForum settings.asp access
100000332 || COMMUNITY WEB-MISC Artmedic Newsletter log.php access
100000333 || COMMUNITY WEB-MISC Artmedic Newsletter log.php access
100000334 || COMMUNITY WEB-MISC CaLogic Calendars reconfig.php remote 
file include
100000335 || COMMUNITY WEB-MISC CaLogic Calendars srxclr.php remote file 
include
100000336 || COMMUNITY WEB-MISC phpMyDirectory footer.php remote file 
include
100000337 || COMMUNITY WEB-MISC phpMyDirectory defaults_setup.php remote 
file include
100000338 || COMMUNITY WEB-MISC phpMyDirectory header.php remote file 
include
100000339 || COMMUNITY WEB-MISC V-Webmail core.php remote file include
100000340 || COMMUNITY WEB-MISC V-Webmail pop3.php remote file include
100000341 || COMMUNITY WEB-MISC DoceboLMS help.php remote file include
100000342 || COMMUNITY WEB-MISC DoceboLMS business.php remote file include
100000343 || COMMUNITY WEB-MISC DoceboLMS credits.php remote file include
100000344 || COMMUNITY WEB-MISC SocketMail index.php remote file include
100000345 || COMMUNITY WEB-MISC SocketMail inc-common.php remote file 
include
100000346 || COMMUNITY WEB-MISC Plume CMS prepend.php remote file include
100000347 || COMMUNITY WEB-MISC Ezupload Pro form.php remote file include
100000348 || COMMUNITY WEB-MISC Ezupload Pro customize.php remote file 
include
100000349 || COMMUNITY WEB-MISC Ezupload Pro initialize.php remote file 
include
100000350 || COMMUNITY WEB-MISC UBBThreads ubbt.inc.php remote file include
100000351 || COMMUNITY WEB-MISC UBBThreads config[cookieprefix] remote 
file include
100000352 || COMMUNITY WEB-MISC Blend Portal blend_common.php remote 
file include
100000353 || COMMUNITY WEB-MISC tinyBB footers.php remote file include
100000354 || COMMUNITY WEB-MISC phpBB-Amod lang_activity.php remote file 
include
100000355 || COMMUNITY WEB-MISC eSyndiCat cron.php remote file include
100000356 || COMMUNITY WEB-MISC BASE base_qry_common.php remote file include
100000357 || COMMUNITY WEB-MISC BASE base_stat_common.php remote file 
include
100000358 || COMMUNITY WEB-MISC BASE base_include.inc.php remote file 
include
100000359 || COMMUNITY WEB-MISC Fastpublish CMS drucken.php remote file 
include
100000360 || COMMUNITY WEB-MISC Fastpublish CMS drucken2.php remote file 
include
100000361 || COMMUNITY WEB-MISC Fastpublish CMS email_an_benutzer.php 
remote file include
100000362 || COMMUNITY WEB-MISC Fastpublish CMS rechnung.php remote file 
include
100000363 || COMMUNITY WEB-MISC Fastpublish CMS search.php remote file 
include
100000364 || COMMUNITY WEB-MISC Fastpublish CMS admin.php remote file 
include
100000365 || COMMUNITY WEB-MISC phpNuke index.php remote file include
100000366 || COMMUNITY WEB-MISC phpNuke admin_ug_auth.php remote file 
include
100000367 || COMMUNITY WEB-MISC phpNuke admin_board.php remote file include
100000368 || COMMUNITY WEB-MISC phpNuke admin_disallow.php remote file 
include
100000369 || COMMUNITY WEB-MISC phpNuke admin_forumauth.php remote file 
include
100000370 || COMMUNITY WEB-MISC phpNuke admin_groups.php remote file include
100000371 || COMMUNITY WEB-MISC phpNuke admin_ranks.php remote file include
100000372 || COMMUNITY WEB-MISC phpNuke admin_styles.php remote file include
100000373 || COMMUNITY WEB-MISC phpNuke admin_user_ban.php remote file 
include
100000374 || COMMUNITY WEB-MISC phpNuke admin_words.php remote file include
100000375 || COMMUNITY WEB-MISC phpNuke admin_avatar.php remote file include
100000376 || COMMUNITY WEB-MISC phpNuke admin_db_utilities.php remote 
file include
100000377 || COMMUNITY WEB-MISC phpNuke admin_forum_prune.php remote 
file include
100000378 || COMMUNITY WEB-MISC phpNuke admin_forums.php remote file include
100000379 || COMMUNITY WEB-MISC phpNuke admin_mass_email.php remote file 
include
100000380 || COMMUNITY WEB-MISC phpNuke admin_smilies.php remote file 
include
100000381 || COMMUNITY WEB-MISC phpNuke admin_ug_auth.php remote file 
include
100000382 || COMMUNITY WEB-MISC phpNuke admin_users.php remote file include
100000383 || COMMUNITY WEB-MISC OsTicket open_form.php remote file include
100000384 || COMMUNITY WEB-MISC Ottoman index.php remote file include
100000385 || COMMUNITY WEB-MISC Ottoman error.php remote file include
100000386 || COMMUNITY WEB-MISC Ottoman main_class.php remote file include




More information about the Snort-sigs mailing list