ruleUpdate
17-026 (06 juin 2017)
Publish Date: 06 juin 2017
Description
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
DCERPC Services
1008422 - Detected SMBv1 Request
DCERPC Services - Client
1008423 - Detected SMBv1 Response
Database MySQL
1008330 - MySQL Denial Of Service Vulnerability (CVE-2017-3599)
HP Intelligent Management Center (IMC)
1008329 - HP Intelligent Management Center RedirectServlet 'parafile' Directory Traversal Vulnerability
OpenSSL
1008270 - OpenSSL ChaCha20/Poly1305 Cipher Suite Heap Buffer Overflow Vulnerability (CVE-2016-7054)
Unix Samba
1008420* - Samba Shared Library Remote Code Execution Vulnerability (CVE-2017-7494)
Web Application Common
1008318* - CPanel Cgiemail And Cgiecho Format String Vulnerability (CVE-2017-5613)
Web Application PHP Based
1008411 - WordPress Tracking Code Manager Plugin Denial Of Service Vulnerability
Web Proxy Squid
1008111 - Squid HTTP Response Denial Of Service Vulnerability
Web Server Common
1008397 - Identified Directory Traversal Attack In HTTP Request Headers
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
1008390 - FTP Server - CompleteFTP
Deep Packet Inspection Rules:
DCERPC Services
1008422 - Detected SMBv1 Request
DCERPC Services - Client
1008423 - Detected SMBv1 Response
Database MySQL
1008330 - MySQL Denial Of Service Vulnerability (CVE-2017-3599)
HP Intelligent Management Center (IMC)
1008329 - HP Intelligent Management Center RedirectServlet 'parafile' Directory Traversal Vulnerability
OpenSSL
1008270 - OpenSSL ChaCha20/Poly1305 Cipher Suite Heap Buffer Overflow Vulnerability (CVE-2016-7054)
Unix Samba
1008420* - Samba Shared Library Remote Code Execution Vulnerability (CVE-2017-7494)
Web Application Common
1008318* - CPanel Cgiemail And Cgiecho Format String Vulnerability (CVE-2017-5613)
Web Application PHP Based
1008411 - WordPress Tracking Code Manager Plugin Denial Of Service Vulnerability
Web Proxy Squid
1008111 - Squid HTTP Response Denial Of Service Vulnerability
Web Server Common
1008397 - Identified Directory Traversal Attack In HTTP Request Headers
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
1008390 - FTP Server - CompleteFTP