Sourcefire VRT Certified Snort Rules Update 2013-01-08

[Research <research () sourcefire com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Sourcefire VRT Certified Snort Rules Update

Synopsis:
The Sourcefire VRT is aware of vulnerabilities affecting products from
Microsoft Corporation.

Details:
Microsoft Security Bulletin MS13-002:
Microsoft XML Core Services (MSXML) contains programming errors that
may allow a remote attacker to execute code on an affected system.

Rules to detect attacks targeting these vulnerabilities are included in
this release and are identified with GID 1, SIDs 25270 and 25275.  

Microsoft Security Bulletin MS13-003:
Microsoft System Center contains programming errors that may allow a
remote attacker to inject code into web pages or execute
attacker-controlled JavaScript in a victim web browser via a cross-site
scripting attack.

Rules to detect attacks targeting these vulnerabilities are included in
this release and are identified with GID 1, SIDs 25272 and 25273.

Additionally, the Sourcefire VRT has added and modified multiple rules
in the blacklist, file-other, indicator-compromise, malware-cnc,
server-iis and server-webapp rule sets to provide coverage for emerging
threats from these technologies.

For a complete list of new and modified rules please see:

http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2013-01-08.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFQ7GJnaBoqZBVJfwMRAgWxAJ42Ye7Hg+pVdLTPVgtY5l+jXV/iFgCfZcM6
SYCgH4T56kIT8KG44yQxyss=
=kq70
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
Master SQL Server Development, Administration, T-SQL, SSAS, SSIS, SSRS
and more. Get SQL Server skills now (including 2012) with LearnDevNow -
200+ hours of step-by-step video tutorials by Microsoft MVPs and experts.
SALE $99.99 this month only - learn more at:
http://p.sf.net/sfu/learnmore_122512
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!