Snort rules for WMF exploit updated

Just a reminder that if you are using Snort rules for this exploit, check for updates. Bleeding- Edge Snort has posted a newer one here. Also if you are using Snort rules in the free Sunbelt Kerio Personal Firewall, update your signatures to the latest (simply append them to the file “bad-traffic.rlk” in the Program FilesSunbelt SoftwarePersonal Firewall 4ConfigIDSRules folder).  

Alex Eckelberry

One thought on “Snort rules for WMF exploit updated”

Leave a Reply

Your email address will not be published. Required fields are marked *