Snort mailing list archives

Sourcefire VRT Certified Snort Rules Update 2015-03-05


From: Research <research () sourcefire com>
Date: Thu, 5 Mar 2015 17:57:15 GMT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Sourcefire VRT Certified Snort Rules Update

Synopsis:
Talos is aware of vulnerabilities affecting OpenSSL.

Details:
OpenSSL RSA_EXPORT attack CVE-2015-0204:
A coding deficiency in OpenSSL exists that may lead to information
disclosure.

Rules to detect attacks targeting this vulnerability are included in
this release and are identified with GID 1, 33686 through 33703.


Talos has also added and modified multiple rules in the blacklist,
browser-chrome, file-identify, file-other, malware-cnc, protocol-voip,
server-other and sql rule sets to provide coverage for emerging threats
from these technologies.


For a complete list of new and modified rules please see:

https://www.snort.org/advisories
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFU+JeJQLjqI2QiHVMRAqAcAJ9vK/haUox17EmHeyWV/ytb4MG3twCfce7J
DYdN6q4jhcWnoNExsOD92Sc=
=Hv/e
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the 
conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!


Current thread: