<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Every rule has reference metadata, if the rule applies to a CVE then said CVE is referenced.  GREP FTW!<br><br>Sent from the iRoad</div><div><br>On Jun 24, 2013, at 20:05, "Bandekar, Ravi" <<a href="mailto:Ravi.Bandekar@...3821...">Ravi.Bandekar@...253...3821...</a>> wrote:<br><br></div><blockquote type="cite"><div><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"><meta name="Generator" content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
        {font-family:"ZapfChancery Italic";}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";
        mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
        {mso-style-priority:99;
        mso-style-link:"Balloon Text Char";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:8.0pt;
        font-family:"Tahoma","sans-serif";
        mso-fareast-language:EN-US;}
span.EmailStyle17
        {mso-style-type:personal-compose;
        font-family:"Calibri","sans-serif";
        color:windowtext;}
span.BalloonTextChar
        {mso-style-name:"Balloon Text Char";
        mso-style-priority:99;
        mso-style-link:"Balloon Text";
        font-family:"Tahoma","sans-serif";}
.MsoChpDefault
        {mso-style-type:export-only;
        font-family:"Calibri","sans-serif";
        mso-fareast-language:EN-US;}
@page WordSection1
        {size:612.0pt 792.0pt;
        margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--><div class="WordSection1"><p class="MsoNormal">Hi <o:p></o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal">I would like to know how we are able to check if specific CVEs have been added to the VRT rules. <o:p></o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal">Thanks. <o:p></o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal"><span style="mso-fareast-language:EN-AU">Kind Regards<o:p></o:p></span></p><p class="MsoNormal"><span style="mso-fareast-language:EN-AU"><o:p> </o:p></span></p><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="400" style="width:300.0pt"><tbody><tr><td style="padding:0cm 0cm 6.0pt 0cm"><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="400" style="width:300.0pt"><tbody><tr><td style="padding:0cm 0cm 0cm 0cm"><p class="MsoNormal" style="line-height:9.75pt"><b><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#382C82;mso-fareast-language:EN-AU">Ravi Bandekar<o:p></o:p></span></b></p><p class="MsoNormal" style="line-height:9.75pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#505050;mso-fareast-language:EN-AU">Security Technology Operations </span><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#3E3E3E;mso-fareast-language:EN-AU"><br></span><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#505050;mso-fareast-language:EN-AU">Security Operations, Telstra Operations</span><span style="font-size:12.0pt;mso-fareast-language:EN-AU"><o:p></o:p></span></p></td><td width="96" style="width:72.0pt;padding:0cm 0cm 0cm 0cm"><p class="MsoNormal"><span style="mso-fareast-language:EN-AU"><image001.png></span><span style="font-size:12.0pt;mso-fareast-language:EN-AU"><o:p></o:p></span></p></td></tr></tbody></table></td></tr></tbody></table><p class="MsoNormal" style="text-autospace:none"><span style="font-size:8.0pt;font-family:"ZapfChancery Italic";color:green;mso-fareast-language:EN-AU"><o:p> </o:p></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:8.0pt;font-family:"ZapfChancery Italic";color:green;mso-fareast-language:EN-AU"><o:p> </o:p></span></p><p class="MsoNormal" style="text-autospace:none"><span style="font-size:8.0pt;font-family:"ZapfChancery Italic";color:green;mso-fareast-language:EN-AU"><o:p> </o:p></span></p><p class="MsoNormal"><span style="mso-fareast-language:EN-AU"><o:p> </o:p></span></p><p class="MsoNormal"><o:p> </o:p></p></div></div></blockquote><blockquote type="cite"><div><span>------------------------------------------------------------------------------</span><br><span>This <a href="http://SF.net">SF.net</a> email is sponsored by Windows:</span><br><span></span><br><span>Build for Windows Store.</span><br><span></span><br><span><a href="http://p.sf.net/sfu/windows-dev2dev">http://p.sf.net/sfu/windows-dev2dev</a></span></div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Snort-sigs mailing list</span><br><span><a href="mailto:Snort-sigs@lists.sourceforge.net">Snort-sigs@...2723...urceforge.net</a></span><br><span><a href="https://lists.sourceforge.net/lists/listinfo/snort-sigs">https://lists.sourceforge.net/lists/listinfo/snort-sigs</a></span><br><span><a href="http://www.snort.org">http://www.snort.org</a></span><br><span></span><br><span></span><br><span>Please visit <a href="http://blog.snort.org">http://blog.snort.org</a> for the latest news about Snort!</span></div></blockquote></body></html>