ruleUpdate
19-009 (26 de lutego de 2019)
Publish Date: 26 de lutego de 2019
DESCRIPTION
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
DCERPC Services
1009490 - Block Administrative Share - 1
FTP Server Common
1003784* - FTP Server Restrict Executable File Uploads
Kubernetes Web UI (Dashboard)
1009493 - Kubernetes Dashboard Authentication Bypass Information Disclosure Vulnerability (CVE-2018-18264)
Microsoft Office
1009538 - Microsoft Office Multiple Security Vulnerabilities (Feb 2019)
Web Application Common
1009496* - Microsoft Exchange Server Elevation Of Privilege Vulnerability
Web Application PHP Based
1009541 - Drupal Core Remote Code Execution Vulnerability (CVE-2019-6340)
1009544 - WordPress Image Remote Code Execution Vulnerability (CVE-2019-8942)
Web Client Common
1009536* - Adobe Acrobat And Reader Information Disclosure Vulnerability (CVE-2019-7815)
1009517 - Microsoft Windows JET Database Engine 'CreateLvSMLocs' Remote Code Execution (CVE-2019-0577)
1009537 - Microsoft Windows JET Database Engine Multiple Remote Code Execution Vulnerabilities (Feb - 2019)
1009533 - Microsoft Windows JET Database Out-of-Bounds Read Remote Code Execution Vulnerability (CVE-2019-0575)
1009539 - Microsoft Windows Multiple GDI Information Disclosure Vulnerabilities (Feb 2019)
Web Server Oracle
1009358* - Oracle WebLogic Server RemoteObject Insecure Deserialization Vulnerability (CVE-2018-3191)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
DCERPC Services
1009490 - Block Administrative Share - 1
FTP Server Common
1003784* - FTP Server Restrict Executable File Uploads
Kubernetes Web UI (Dashboard)
1009493 - Kubernetes Dashboard Authentication Bypass Information Disclosure Vulnerability (CVE-2018-18264)
Microsoft Office
1009538 - Microsoft Office Multiple Security Vulnerabilities (Feb 2019)
Web Application Common
1009496* - Microsoft Exchange Server Elevation Of Privilege Vulnerability
Web Application PHP Based
1009541 - Drupal Core Remote Code Execution Vulnerability (CVE-2019-6340)
1009544 - WordPress Image Remote Code Execution Vulnerability (CVE-2019-8942)
Web Client Common
1009536* - Adobe Acrobat And Reader Information Disclosure Vulnerability (CVE-2019-7815)
1009517 - Microsoft Windows JET Database Engine 'CreateLvSMLocs' Remote Code Execution (CVE-2019-0577)
1009537 - Microsoft Windows JET Database Engine Multiple Remote Code Execution Vulnerabilities (Feb - 2019)
1009533 - Microsoft Windows JET Database Out-of-Bounds Read Remote Code Execution Vulnerability (CVE-2019-0575)
1009539 - Microsoft Windows Multiple GDI Information Disclosure Vulnerabilities (Feb 2019)
Web Server Oracle
1009358* - Oracle WebLogic Server RemoteObject Insecure Deserialization Vulnerability (CVE-2018-3191)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.