[Emerging-Sigs] Emerging Threats Daily Signature Changes

Thu Feb 14 17:00:09 EST 2008

[***] Results from Oinkmaster started Thu Feb 14 17:00:09 2008 [***]

[+++]          Added rules:          [+++]

 2007849 - ET TROJAN Kpang.com Related Trojan User-Agent (alertup) (bleeding-virus.rules)


[///]     Modified active rules:     [///]

 2007779 - ET TROJAN Kpang.com Related Trojan User-Agent (kpangupdate) (bleeding-virus.rules)
 2007817 - ET CURRENT_EVENTS FaceBook PhotoUploader Buffer Overflow Exploit (bleeding.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-sid-msg.map (3):
        2007779 || ET TROJAN Kpang.com Related Trojan User-Agent (kpangupdate)
        2007817 || ET CURRENT_EVENTS FaceBook PhotoUploader Buffer Overflow Exploit || url,isc.sans.org/diary.html?storyid=3929 || bugtraq,27576 || url,www.milw0rm.com/exploits/5102 || url,www.milw0rm.com/exploits/5049
        2007849 || ET TROJAN Kpang.com Related Trojan User-Agent (alertup)

     -> Added to bleeding-sid-msg.map.txt (3):
        2007779 || ET TROJAN Kpang.com Related Trojan User-Agent (kpangupdate)
        2007817 || ET CURRENT_EVENTS FaceBook PhotoUploader Buffer Overflow Exploit || url,isc.sans.org/diary.html?storyid=3929 || bugtraq,27576 || url,www.milw0rm.com/exploits/5102 || url,www.milw0rm.com/exploits/5049
        2007849 || ET TROJAN Kpang.com Related Trojan User-Agent (alertup)

[---]     Removed non-rule lines:    [---]

     -> Removed from bleeding-sid-msg.map (2):
        2007779 || ET TROJAN Kpang.com Related Trojan User-Agent
        2007817 || ET CURRENT_EVENTS FaceBook PhotoUploader Buffer Overflow Exploit || url,isc.sans.org/diary.html?storyid=3929 || bugtraq,27576 || url,www.milw0rm.com/exploits/5049

     -> Removed from bleeding-sid-msg.map.txt (2):
        2007779 || ET TROJAN Kpang.com Related Trojan User-Agent
        2007817 || ET CURRENT_EVENTS FaceBook PhotoUploader Buffer Overflow Exploit || url,isc.sans.org/diary.html?storyid=3929 || bugtraq,27576 || url,www.milw0rm.com/exploits/5049