[Snort-sigs] Snort Community Rules Update

Sourcefire VRT research at ...435...
Mon Oct 23 09:02:51 EDT 2006

This message is to announce the availability of an update for the Sourcefire community rule set, which can be downloaded free of cost or registration from http://www.snort.org/pub-bin/downloads.cgi.

This release fixes a missing semicolon in SID 100000906, and uses improved PCRE for SIDs 100000272-100000278.

Sourcefire would like to thank both Monica Cloutier and <info at ...3194...> for pointing out the error with SID 100000906, and Blake Hartstein for submitting the improved PCRE for SIDs 100000272-100000278. As a reminder, anyone who wishes to submit rules may do so at http://www.snort.org/reg-bin/rulesubmit.cgi.

A list of modified rules and their SIDs follows.

Alex Kirk
Community Rules Maintainer
Sourcefire, Inc.

100000272 || COMMUNITY BOT GTBot ver command
100000273 || COMMUNITY BOT GTBot info command
100000274 || COMMUNITY BOT GTBot scan command
100000275 || COMMUNITY BOT GTBot portscan command
100000276 || COMMUNITY BOT GTBot stopscan command
100000277 || COMMUNITY BOT GTBot packet command
100000278 || COMMUNITY BOT GTBot bnc command
100000906 || COMMUNITY WEB-PHP UBB.threads remote file include

More information about the Snort-sigs mailing list