[Snort-users] ET POLICY Vulnerable Java Version 1.8.x Detected

Will Metcalf william.metcalf at ...11827...
Sun Mar 22 12:37:10 EDT 2015


I just rolled out a fix for this in the ET set.  I fresh rule pull should
resolve.

Regards,

Will

On Sun, Mar 22, 2015 at 9:41 AM, Joel Esler (jesler) <jesler at ...589...>
wrote:

> That’s an emerging threats rule, not an official Snort Subscriber Rule Set
> rule.  You’ll have to take that up with the emerging threats personnel.
>
> --
> *Joel Esler*
> Open Source Manager
> Threat Intelligence Team Lead
> Talos Group
>
> On Mar 20, 2015, at 7:38 PM, Jonathon Elwood <jaelwood at ...11827...> wrote:
>
> I'm running snort version 2.9.7.0 pkg v3.2.3 (this is pfsense version
> 2.2.1).
>
> I'm getting an alert for some of my machines that have Java installed (ET
> POLICY Vulnerable Java Version 1.8.x Detected).  These are Windows 8.1
> machines and I verified that I have the latest version of Java.  Java
> version "1.8.0_40" Java(TM) SE Runtime Environment (build 1.8.0_40-b26)
>
> Any idea why snort would trigger this alert with this version of Java?
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming The Go Parallel Website,
> sponsored
> by Intel and developed in partnership with Slashdot Media, is your hub for
> all
> things parallel software development, from weekly thought leadership blogs
> to
> news, videos, case studies, tutorials and more. Take a look and join the
> conversation now.
> http://goparallel.sourceforge.net/_______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
>
>
>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming The Go Parallel Website,
> sponsored
> by Intel and developed in partnership with Slashdot Media, is your hub for
> all
> things parallel software development, from weekly thought leadership blogs
> to
> news, videos, case studies, tutorials and more. Take a look and join the
> conversation now. http://goparallel.sourceforge.net/
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150322/d3a74905/attachment.html>


More information about the Snort-users mailing list