Snort

Snort News - | 2008-06-02 17:01

If you want the lowdown on the recently announced flash vuln (CVE-2007-0071) then take a look at our analysis here:

http://www.snort.org/vrt/docs/analysis/flash-cve-2007-0071.html

Enjoy.

Snort News - | 2008-05-30 17:01

Offer to acquire Sourcefire

Hi everyone,

As you may have heard, Sourcefire received an unsolicited offer to
acquire the company. This morning Sourcefire announced that our board
has rejected that offer. The complete press release is available at:

http://investor.sourcefire.com/phoenix.zhtml?c=204582&p=irol-newsArticle&ID=1152071&highlight=

I hope that clears up questions anyone may have!

-Marty

Hi everyone,

If you didn't receive an invitation by email or haven't registered yet, the next installment of the Snort Users Webinar Series is coming up. Based on popular demand, Matt Olney of the VRT will be discussing the VRT’s detection methodology and creating effective Snort Rules. We expect that the rules writing will take more than one session, so we’ll be calling this Part I.

Part I will cover:
• Detection theory
• What you need to know about Snort’s architecture
• Using the rule options available in Snort

Here are the details:

Date: June 4, 2008
Time: 10:00 AM US Eastern Daylight Time (GMT -4:00)

To register for this webinar visit: https://sourcefireevents.webex.com/mw0305l/mywebex/default.do?siteurl=sourcefireevents&service=6

We hope you can join us.

Mike

The Sourcefire VRT is aware of vulnerabilities affecting CA BrightStor ARCServe Backup and Oracle Database Server.

These rules are available to subscribers only until Friday, May 30, 2008.

Download rules | view advisory | view changelog | subscribe now.

The Sourcefire VRT is aware of a vulnerability affecting Adobe Flash Player.

These rules are available to subscribers only until Saturday, June 28, 2008.

Download rules | view advisory | view changelog | subscribe now.

The Sourcefire VRT has added multiple rules in the spyware-put and backdoor categories to provide coverage for emerging spyware and backdoor threats.

These rules are available to subscribers only until Thursday, June 26, 2008.

Download rules | view advisory | view changelog | subscribe now.

A number of people have received Google alerts related to a reported potential evasion in Snort (CVE-2008-1804). This issue was resolved with the release of Snort 2.8.1. We do advise everyone to upgrade to the latest release available at: http://www.snort.org/dl/

Regards,

Mike
Snort Community Manager
Sourcefire, Inc.
(410)423-1930

The OfficeCat tool has been updated to include detection for a vulnerability in Microsoft Publisher.

Download zip archive | view advisory.

Hi everyone,

I just wanted to let you know that Snort won the SC Magazine Europe 2008 award for “Best Security Product”. The full article with all of the winners is available at:

http://www.scmagazine.com/uk/news/article/804222/sc-awards-europe-2008-winners-announced/

Please join me in congratulating the Marty and the rest of the Snort team!

Regards,

Mike

Hi everyone,

The snort.org maintenance window announced a few weeks ago had to rescheduled. The new maintenance window will be Thursday April 24, 8:00 PM - 10:00 PM US Eastern Time. Snort.org and lists.snort.org will be unavailable during this time. Snort-users, Snort-dev, and Snort-sigs mailing lists will be unaffected.

Regards,

Mike

The Sourcefire VRT is aware of vulnerabilities affecting HP OpenView and Asterisk Open Source applications.

These rules are available to subscribers only until Thursday, May 22, 2008.

Download rules | view advisory | view changelog | subscribe now.

The Sourcefire VRT is aware of a vulnerability affecting the Microsoft Malware Protection Engine.

These rules are available to subscribers only until Wednesday, June 18, 2008.

Download rules | view advisory | view changelog | subscribe now.

I'm pleased announce the winners of the 2008 Snort Scholarship Program. They are:

Michela Becchi, a PhD candidate in computer engineering at Washington University in St. Louis. Becchi has been using Snort for the last two years and does research on accelerating regular expression matching, especially in the context of Network IPS. She began to study the Snort engine and rule-sets as part of her research and at her internships at NEC Labs and Intel.

Marie-Paule Uwase, a Bachelor of Science candidate in computer science at the National University of Rwanda (NUR). Uwase was introduced to Snort through her course work at NUR and is now part of the University’s security team using Snort to protect the university’s critical infrastructure.

This year's winners were selected out of nearly 200 applications submitted from around the world. It's truly a pleasure for everyone here at Sourcefire to be able to award these scholarships to deserving students in the open source community.

Please join me in congratulating Michela and Marie-Paule.

Keep on Snorting

-Mike

The Sourcefire VRT is aware of vulnerabilities affecting Microsoft Word and the Microsoft Jet Database Engine.

These rules are available to subscribers only until Thursday, June 12, 2008.

Download rules | view advisory | view changelog | subscribe now.

I wanted to remind everyone that the application deadline for the Snort Scholarship is April 15, 2008. If you're interested in a $5,000 Scholarship make sure to submit your application by 12:00 AM EDT on April 16, 2008.

The application is available at: http://www.sourcefire.com/products/snort/scholarship/application/

Good Luck!

Mike