19-009 (2019年2月26日)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

DCERPC Services
1009490 - Block Administrative Share - 1


FTP Server Common
1003784* - FTP Server Restrict Executable File Uploads


Kubernetes Web UI (Dashboard)
1009493 - Kubernetes Dashboard Authentication Bypass Information Disclosure Vulnerability (CVE-2018-18264)


Microsoft Office
1009538 - Microsoft Office Multiple Security Vulnerabilities (Feb 2019)


Web Application Common
1009496* - Microsoft Exchange Server Elevation Of Privilege Vulnerability


Web Application PHP Based
1009541 - Drupal Core Remote Code Execution Vulnerability (CVE-2019-6340)
1009544 - WordPress Image Remote Code Execution Vulnerability (CVE-2019-8942)


Web Client Common
1009536* - Adobe Acrobat And Reader Information Disclosure Vulnerability (CVE-2019-7815)
1009517 - Microsoft Windows JET Database Engine 'CreateLvSMLocs' Remote Code Execution (CVE-2019-0577)
1009537 - Microsoft Windows JET Database Engine Multiple Remote Code Execution Vulnerabilities (Feb - 2019)
1009533 - Microsoft Windows JET Database Out-of-Bounds Read Remote Code Execution Vulnerability (CVE-2019-0575)
1009539 - Microsoft Windows Multiple GDI Information Disclosure Vulnerabilities (Feb 2019)


Web Server Oracle
1009358* - Oracle WebLogic Server RemoteObject Insecure Deserialization Vulnerability (CVE-2018-3191)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.