Snort mailing list archives

Sourcefire VRT Certified Snort Rules Update 2010-06-10


From: Research <research () sourcefire com>
Date: Thu, 10 Jun 2010 17:30:33 -0400 (EDT)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Sourcefire VRT Certified Snort Rules Update

Synopsis:
The Sourcefire VRT is aware of a vulnerability affecting Microsoft Help
and Support Center.

Details:
Microsoft Help and Support Center Bypass Vulnerability:
Microsoft Help and Support Center contains a programming error that may
allow a remote attacker to bypass security restrictions on an affected
system. The error occurs when invalid hex-encoded characters are used
as a parameter to a search query using the hcp:// URI schema.

A rule to detect attacks targeting this vulnerability is included in
this release and is identified with GID 1, SID 16665.

For a complete list of new and modified rules please see:

http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2010-06-10.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQFMEVl5QcQOxItLLaMRArPAAJ9OI7zgIV6GWeE9i4mvLojHU4Ew2wCbBL7c
k76oclRs2q/mBP4ElVkxTQs=
=Cmc0
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs


Current thread: