webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-10 02:55:55 +02:00
Code Issues Packages Projects Releases Wiki Activity
11,257 Commits 2 Branches 1 Tag
ea4620fc4abefc4e8c06e2f0f01c10cc4e45e554
Commit Graph

71 Commits

Author SHA1 Message Date
Matthias Fischer
49f7ee5d72 snort: Update to 2.9.11 
For details see:

Release notes:
https://snort.org/downloads/snort/release_notes_2.9.11.txt

Changelog:
https://snort.org/downloads/snort/changelog_2.9.11.txt

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-10-23 16:24:46 +01:00
Michael Tremer
a9a91e5fa7 ids.cgi: Fix remote command execution vulnerability 
The OINKCODE variable was only validated for proper input
when the Save button was clicked.

Did the user demand to download new rules instead, the
content of that variable was not being validated (again)
and was passed to wget on the shell.

This was done with privileges of the "nobody" user.

Fixes #11401

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-06-14 12:58:12 +01:00
Matthias Fischer
ba6fc476fb snort: Update to 2.9.9.0 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-12-18 15:19:52 +00:00
Stefan Schantl
a27c40a05b ids.cgi: Drop guardian related code. 
Guardian competely will be managed by it's own CGI.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2016-07-29 13:25:28 +02:00
Matthias Fischer
3a376d999e snort 2.9.8.2: update snort download url 
Update for
http://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=0aff7b81965c06756ff42482ef0aa3ccfa68bf8f

Update url is set to 'snortrules-snapshot-2982.tar.gz'

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2016-05-21 11:35:17 +02:00
Matthias Fischer
5a5e5f04a7 snort: Update to 2.9.8.2 
Release notes:

2016-03-09 - Snort 2.9.8.2
[*] New additions
 *  Future-flow and DNS API exposed to lua detector.
 *  Double VLAN tagging support.
[*] Improvements
 *  Performance improvements to AppID.
 *  Stability improvements to file and ftp_telnet preprocessor.
 *  Fixed several issues with SDF and obfuscation.
 *  Resolved an issue of improper handling of malformed DNS host
    in AppID.
 *  HTTP PAF accepts all tokens between method and version strings
    in a request URI.
 *  Resolved snort build issue with "--disable-perfprofiling" configure
    option.
 *  Enhanced mime parsing by adding support for detecting files
    after unknown headers and no headers.
 *  Fixed issue with gzip decompression. If the server response specifies
    Content-Encoding as GZIP, but no Content-Length field for HTTP ver 1.0.
 *  End of Header(EOH) identification for HTTP response header spanning multiple
    packets.
 *  Improved packet reassembly for HTTP.
 *  Fixed Flash LZMA decompression issue.

For details see:
https://www.snort.org/downloads/snort/changelog_2.9.8.2.txt

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2016-05-21 11:35:11 +02:00
Matthias Fischer
b6f571fa88 snort: Update to 2.9.7.6 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-11-04 21:18:56 +00:00
Matthias Fischer
8d29504c4d snort: Update urls for rules download (2.9.7.0) in 'ids.cgi' 2014-11-05 19:20:59 +01:00
Erik Kapfer
b3f401fba4 ids.cgi fix snort rules download url. 
fixes: 10579
 2014-07-29 22:31:26 +02:00
Stefan Schantl
ace810a3f8 snort: Update url's for rule download. 2014-05-17 15:27:21 +02:00
Alf Høgemark
f8aa06792f cgi-bin: Add title attribute to input type image where missing 
Almost all of <input type="image"... has both an alt and a
title attribute, but some are missing title, and when the icon
is not very clear, it makes it harder to understand what the icon
does. By adding title, the browser displays text when mouse pointer
is over the icon.

Also add missing quotes for alt and title attributes where needed.
 2014-02-19 18:31:02 +01:00
Alf Høgemark
631b67b7cd cgi-bin: HTML cleanup, add quotes for attribute values 2014-02-15 16:54:38 +01:00
Alf Høgemark
2c01f467d9 cgi-bin and themes: Remove language attribute on script tag 2014-02-15 16:11:45 +01:00
Alf Høgemark
e6d8a42109 ids.cgi: htmlcleanup, change html tags from uppercase to lowercase 2014-02-15 15:46:27 +01:00
Alexander Marx
7cc8a0e526 Layout changes ids.cgi 2014-01-09 15:02:49 +01:00
Arne Fitzenreiter
f2665db1ad snort: update to 2.9.5.3. 2013-08-10 20:10:00 +02:00
Arne Fitzenreiter
a0fa489f2f snort: update to 2.9.5. 
add VRT/GPLv2 community rules.
fix wrong oinkcode warning if no oinkcode is needed.
 2013-07-15 17:05:44 +02:00
Arne Fitzenreiter
3e30714aa7 snort: fix sourcefire rules downloads. 2013-02-02 09:57:14 +01:00
Arne Fitzenreiter
745d9c0717 Revert "Revert "snort: Update to 2.9.4."" 
This reverts commit f17d112c04.
 2013-02-02 09:50:49 +01:00
Arne Fitzenreiter
d095947fed snort: updated ruleset download url for new snort. 2012-11-03 16:29:53 +01:00
Arne Fitzenreiter
89f3d66c24 snort: update to 2.9.1.2. 2011-11-27 12:50:19 +01:00
Christian Schmidt
c07e938edb Updated snort to current stable, This is a large changeset. 
Updated snort and daq. Snort detection engine is changed and some preprocessors have been updated.
 2011-03-14 18:52:11 +01:00
Christian Schmidt
c703cd4ce5 Changed sourcefire download link to current snort version. 2011-02-10 21:43:24 +01:00
Arne Fitzenreiter
324bb8881f remove more bogus logentries. 2011-01-22 18:54:31 +01:00
Christian Schmidt
0972c65075 Changed snort last update time to perl function. 2011-01-10 23:04:29 +01:00
Christian Schmidt
42d9192e0c Fixed snort display bugs, 0000745, 0000751. 2011-01-09 13:08:50 +01:00
Christian Schmidt
ac93c5d0aa Updated snort to stable 2.9.0.2, need to check configs. 2010-12-06 18:46:37 +01:00
Arne Fitzenreiter
3640afefc7 Fix emergingthreats rules download. 2010-11-16 22:25:26 +01:00
Christian Schmidt
bd4ea3c25b Some bugfixes for the outgoing fw and grouping feature. 2010-09-03 12:25:41 +02:00
Christian Schmidt
73231650c1 This should fix bug #0000689 
We still need to think about an upload button.
Needs testing with upstream proxy
 2010-07-15 17:52:04 +02:00
Christian Schmidt
6119650652 Fixed detection of snort description if there is no CRLF and the 
rules are misbuild. This fixes bug #0000669
 2010-06-25 18:37:00 +02:00
Arne Fitzenreiter
ce0e83b3ba Replaced snort gpl community rules by emergingthreats.net rules. 2010-06-14 19:00:26 +02:00
Christian Schmidt
f805321a33 Changed download link for snort registered rules, and min space requirements. 2010-05-27 18:50:25 +02:00
Christian Schmidt
90c2e1641e Fixed Guardian unable to change the config. 
I have added a new function to replace some particular vars in the
settings files without knowing or deleting all existing ones.
 2010-05-21 12:05:41 +02:00
Christian Schmidt
75a786b606 Updated snort to 2.8.6 rules should be available. 2010-05-21 10:37:09 +02:00
Christian Schmidt
32810952cc Removed snort md5 check, added free space check. 2010-05-12 22:08:40 +02:00
Christian Schmidt
33d8921fe3 Updated snort to stable 2.8.5.3. 
This fixes bug #0000628
Rule Url will change the next 30 days because of the 2.8.6 release.
 2010-04-28 20:58:45 +02:00
Christian Schmidt
8c7f7ed444 Fixed snort sub-rules download 2009-09-25 17:30:36 +02:00
Christian Schmidt
f9c2147dee Fixed ids ignore file and style.css 2009-08-14 17:26:19 +02:00
Jan Paul Tuecking
4935eb8b91 Corrected links and text on ids.cgi 2009-07-22 20:10:47 +02:00
Jan Paul Tuecking
d192af9210 Revert "Fixed problems with ids page." 
This reverts commit 67103da2a0.
 2009-07-22 19:08:15 +02:00
Jan Paul Tuecking
67103da2a0 Fixed problems with ids page. 2009-07-22 18:32:45 +02:00
Christian Schmidt
698e3c2ac2 Fixed Snort download rules again 2009-06-25 07:35:57 +02:00
maniacikarus
be9e0412c4 Fixed Snort new url and changed md5 2009-06-03 20:46:47 +02:00
Stefan Schantl
de062c7184 Removed http_preprocessor disable feature from ids.cgi 2009-04-24 14:51:02 +02:00
Stefan Schantl
8d10b9cd2d Chanhed ids.cgi for snort 2.8 2009-04-07 12:54:25 +02:00
Maniacikarus
e55a2b8124 Fixed the Guardian Bug and started Core 25 2008-12-12 23:49:06 +01:00
Daniel Glanzmann
f31d3c1f23 added backupiso to gui 2008-09-30 00:30:21 +02:00
Daniel Glanzmann
983e9dd75f fix broken ids when http_inspect is disabled 2008-09-26 19:03:22 +02:00
Daniel Glanzmann
429f70083a Added a checkbox that enables/disables the snort http pp. 2008-09-25 19:11:46 +00:00