17-026 (June 6, 2017)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

DCERPC Services
1008422 - Detected SMBv1 Request


DCERPC Services - Client
1008423 - Detected SMBv1 Response


Database MySQL
1008330 - MySQL Denial Of Service Vulnerability (CVE-2017-3599)


HP Intelligent Management Center (IMC)
1008329 - HP Intelligent Management Center RedirectServlet 'parafile' Directory Traversal Vulnerability


OpenSSL
1008270 - OpenSSL ChaCha20/Poly1305 Cipher Suite Heap Buffer Overflow Vulnerability (CVE-2016-7054)


Unix Samba
1008420* - Samba Shared Library Remote Code Execution Vulnerability (CVE-2017-7494)


Web Application Common
1008318* - CPanel Cgiemail And Cgiecho Format String Vulnerability (CVE-2017-5613)


Web Application PHP Based
1008411 - WordPress Tracking Code Manager Plugin Denial Of Service Vulnerability


Web Proxy Squid
1008111 - Squid HTTP Response Denial Of Service Vulnerability


Web Server Common
1008397 - Identified Directory Traversal Attack In HTTP Request Headers


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

1008390 - FTP Server - CompleteFTP