Snort mailing list archives

Sourcefire VRT Certified Snort Rules Update 2010-09-10


From: Research <research () sourcefire com>
Date: Fri, 10 Sep 2010 15:16:34 -0400 (EDT)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Sourcefire VRT Certified Snort Rules Update

Synopsis:
The Sourcefire VRT is aware of a virus currently spreading on the
Internet.

Details:
VBMania Mass Mailing Worm
The VBMania mass mailing worm is known to be propagating throughout the
Internet via email. The virus will copy itself to mapped drives on the
victim host and attempt to use MAPI to mail itself to all contacts
found on the system.

Rules to detect attacks by this virus are included in this release and
are identified with GID 1, SIDs 17234 and 17235.

For a complete list of new and modified rules please see:

http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2010-09-10.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQFMioB1QcQOxItLLaMRApx9AJ0dM7l88iPZvV61y1ideLAw9PcY8ACfXMBA
DZfrsuQ6a6jcIdu2frBPlmQ=
=k6gR
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing
http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs


Current thread: