 |
|
 |
|
 |
|
|
| Hot Info | |||||||
|---|---|---|---|---|---|---|---|
|
| About Me & Site | |||||
|---|---|---|---|---|---|
|
| Tools | ||
|---|---|---|
|
| Top 3 News |
|---|
|
|
|
 |
Home 
Index IT/IS Security & Vulnerability VRT Certified Rules Update 2006-12-07
Index IT/IS Security & Vulnerability VRT Certified Rules Update 2006-12-07
| VRT Certified Rules Update 2006-12-07 |
|
| Written by snort.org | ||||
| Friday, 08 December 2006 | ||||
|
The VRT has continued research into vulnerabilities affecting the
Microsoft Operating System and has introduced new rules and modified
existing rules to provide coverage for exploitation attempts targeting
these vulnerabilities. Details: Microsoft Security Bulletin MS06-068: A vulnerability in the way that the Microsoft Agent handles .acf files may allow a remote attacker to execute code on an affected system. The code will be executed with the permissions of the current user who may have administrative privileges. Rules to detect attacks targeting this vulnerability are included in this release and are identified as SIDs 9432 and 9433. 3Com TFTP Service CVE-2006-6183: The 3Com TFTP Service suffers from multiple buffer overflow vulnerabilities. A remote attacker may be able to cause a Denial of Service (DoS) or execute code of their choosing on an affected system by supplying excess data in a GET or PUT command to the service. A rule to detect attacks targeting this vulnerability is included in this release and is identified as SID 9621. Microsoft Security Bulletin MS03-026: After continuing research into a vulnerability affecting Microsoft RPC, the VRT has modified a number of existing rules and introduced new rules to reduce false positive events and to provide greater coverage for possible additional attack vectors. Rules to detect attacks targeting this vulnerability are included in this release and are identified as SIDs 9447 through 9618. Advisory: A detailed advisory as well as a complete list of modified and deleted rules is available at http://www.snort.org/rules/advisories/vrt-rules-2006-12-07.html. Download Rules: These rules will be available to subscribers only until Tuesday, December 12, 2006. Subscribers can download the rules at http://www.snort.org/pub-bin/downloads.cgi.
|
||||
| Last Updated ( Wednesday, 13 December 2006 ) | ||||
|
|
© Copyright 2005, Adhi Rachdian.