[prev in list] [next in list] [prev in thread] [next in thread] 

List:       emerging-sigs
Subject:    [Emerging-Sigs] MS08-067 Sigs
From:       jonkman () jonkmans ! com (Matt Jonkman)
Date:       2008-10-24 2:49:28
Message-ID: 490137B8.4060301 () jonkmans ! com
[Download RAW message or body]

Ya, fixed that up as I posted them. The version that committed was correct.

Matt

John H. Sawyer wrote:
> I ran into a few problems with several of the rules. There are some  
> missing escapes and quotes.
> 
> All rules with "..\..\" had to become "..\\..\\"
> 
> All rules with "../../ had to become "../../"
> 
> -jhs
> 
> On Oct 23, 2008, at 7:47 PM, Matt Jonkman wrote:
> 
>> Great new stuff from Secureworks!
>>
>> http://www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_MS08-067?rev=1.1
>>
>> Sigs for the latest MS vuln, patch just released out of cycle. This  
>> may
>> be a big one so watch these closely. There is malware exploiting it,
>> which there are also sigs up for.
>>
>> Matt
>>
>> -- 
>> --------------------------------------------
>> Matthew Jonkman
>> Emerging Threats
>> Phone 765-429-0398
>> Fax 312-264-0205
>> http://www.emergingthreats.net
>> --------------------------------------------
>>
>> PGP: http://www.jonkmans.com/mattjonkman.asc
>>
>>
>> _______________________________________________
>> Emerging-sigs mailing list
>> Emerging-sigs at emergingthreats.net
>> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
>>
> 
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs at emergingthreats.net
> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs

-- 
--------------------------------------------
Matthew Jonkman
Emerging Threats
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
--------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc



[prev in list] [next in list] [prev in thread] [next in thread]