Sourcefire VRT Update

Date: 2006-05-24

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack.

The format of the file is:

sid - Message (rule group)

New rules:
6467 - CHAT jabber traffic detected (chat.rules)
6468 - CHAT jabber file transfer request (chat.rules)
6469 - EXPLOIT RealVNC connection attempt (exploit.rules)
6470 - EXPLOIT RealVNC authentication types sent attempt (exploit.rules)
6471 - EXPLOIT RealVNC password authentication bypass vulnerability attempt (exploit.rules)

Updated rules:
 108 - BACKDOOR QAZ Worm Client Login access (backdoor.rules)
6021 - BACKDOOR silent spy 2.10 command response port 4225 (backdoor.rules)
6022 - BACKDOOR silent spy 2.10 command response port 4226 (backdoor.rules)