FortiGuard Intrusion Prevention Release Detail

IPS - 3.144 - Thu, 02 Feb 2012 23:15:00 -0800

xmlrpc — Fri, 03 Feb 2012 07:15:00 +0000

DB Version:

3.144

Num New:

New:

Soda.PDF.Professional.PDF.WWF.File.Parsing.Remote.DoS^low

Num Enhanced:

Enhanced:

Kerberos.Spoofing^high

MS.IIS.Malformed.File.Extension.Handling.DoS^medium

IPS - 3.143 - Wed, 01 Feb 2012 23:33:00 -0800

xmlrpc — Thu, 02 Feb 2012 07:33:00 +0000

DB Version:

3.143

Num New:

New:

Adobe.Flashplayer.Authplay.Remote.Code.Execution^critical

Apache.HTTP.Server.ByteRange.DoS^medium

Mozilla.URL.Encode.Stack.Buffer.Overflow^critical

ProFTP.Welcome.Message.Overflow^high

Rosoft.Player.M3U.Buffer.Overflow^medium

Num Enhanced:

Enhanced:

Aol.Desktop.Rtx.Buffer.Overflow^high

FTP.NLST.Directory.Traversal^low

Jcow.CMS.PHP.Remote.Code.Execution^high

MS.IE.FTP.Client.Folder.Traversal^high

MS.Windows.ATMFD.Font.Driver.Remote.Code.Execution^critical

MS.Windows.Media.Library.ASF.File.Buffer.Overflow^critical

MS.Windows.Media.MIDI.Remote.Code.Execution^critical

Num Deprecated:

Deprecated:

MS.IE.FTP.Client.Directory.Traversal^high

Waledac.Botnet.CC^critical

IPS - 3.142 - Tue, 31 Jan 2012 23:41:00 -0800

xmlrpc — Wed, 01 Feb 2012 07:41:00 +0000

DB Version:

3.142

Num New:

New:

Apple.QuickTime.JPEG2000.COD.Length.Integer.Underflow^critical

Cisco.Mutiple.Products.File.Parameter.Directory.Traversal^high

Citrix.Provisioning.Services.Multiple.OpCodes.Integer.Underflow^critical

Citrix.Provisioning.Services.streamprocess.exe.Integer.Overflow^high

CyberLink.Multiple.Products.File.Project.Buffer.Overflow^high

HP.Diagnostics.magentservice.exe.Remote.Code.Execution^critical

HP.Easy.Printer.Care.ActiveX.Control.Remote.Code.Execution^high

HP.ProtectTools.Device.Access.Manager.ActiveX.Buffer.Overflow^high

ISC.DHCP.Server.DHCPv6.NULL.Pointer.Dereference^medium

Microsys.PROMOTIC.Project.File.Handling.Remote.Code.Execution^medium

Nagios.XI.Multiple.HTTP.XSS^medium

Optima.APIFTP.Multiple.DoS^medium

Oracle.9IAS.OracleJSP.Information.Disclosure^medium

Oracle9i.HTTP.Server.Web.Administration.Access.Authentication^medium

PHP.Exif.Header.Parsing.Integer.Overflow^medium

Siemens.SIMATIC.WinCC.Flexible.HmiLoad.Multiple.Vulnerabilities^critical

Siemens.SIMATIC.WinCC.Flexible.miniweb.DoS^medium

VMware.Update.Manager.Jetty.Server.Directory.Traversal^medium

Num Enhanced:

Enhanced:

Adobe.PDF.U3D.File.Memory.Corruption^high

Citrix.XenCenterWeb.Input.Validation^medium

CoDeSys.Scada.Webserver.Stack.Buffer.Overflow^high

Cytel.Studio.CY3.File.Overflow^high

eFront.Multiple.Parameters.XSS.And.SQL.Injection^medium

FTP.NLST.Directory.Traversal^low

HTTP.URI.XSS^medium

IBM.Lotus.Notes.123File.Viewer.Remote.Buffer.Overflow^high

MS.IIS.WebDAV.Authentication.Bypass^medium

MS.SQL.Server.Payload.Execution^high

MS.Windows.Embedded.Packager.Remote.Code.Execution^high

Oracle9i.Default.Configuration.File.Information.Disclosure^medium

Num Renamed:

Renamed:

HTTP.Request.URI.Directory.Traversal^Previous name: "Bajie.HTTP.JServer.CGI.Remote.Command.Execution"

Num Attribute Changed:

Attribute Changed:

Apple.QuickTime.Uncompressed.PICT.Image.Stack.Overflow^Default_action updated to 'drop'

CA.ARCserve.Backup.Server.LGServer.Buffer.Overflow^Default_action updated to 'drop'

Computer.Associates.License.GCR.String.Buffer.Overflow^Default_action updated to 'drop'

MS.IE.XSLT.Memory.Corruption.Remote.Code.Execution^Default_action updated to 'drop'

MS.Windows.Groove.Dll.Hijacking^Default_action updated to 'drop'

MS.Windows.Mail.Insecure.Library.Loading^Default_action updated to 'drop'

MS.Windows.Shell.LNK.Code.Execution^Default_action updated to 'drop'

Oracle.GlassFish.Server.Malformed.Username.XSS^Default_action updated to 'drop'

Symantec.IM.Manager.Multiple.XSS^Default_action updated to 'drop'

Trend.ServerProtect.Agent.Service.Buffer.Overflow^Default_action updated to 'drop'

IPS - 3.141 - Fri, 27 Jan 2012 02:32:00 -0800

xmlrpc — Fri, 27 Jan 2012 10:32:00 +0000

DB Version:

3.141

Num Enhanced:

Enhanced:

ACal.Arbitrary.Command.Execution^low

JetAudio.DownloadFromMusicStore.ActiveX.Remote.Code.Execution^critical

Mozilla.Firefox.Chrome.Window.Spoofing^medium

MS.DotNET.Framework.CLR.Virtual.Method.Delegate.Code.Execution^critical

PHPAuction.PHPAds_Path.File.Inclusion^medium

Num Renamed:

Renamed:

eFront.Multiple.Parameters.XSS.And.SQL.Injection^Previous name: "eFront.Multiple.Parameters.XSS.And.SQL.Vulnerabilities"

Oracle.9iAS.Unauthenticated.User.Access.To.Sensitive.Services^Previous name: "Oracle.9iAS.Unautheticated.User.Access.To.Sensitive.Services"

Num Attribute Changed:

Attribute Changed:

ACDSee.XPMHeaders.Buffer.Overflow^Default_action updated to 'drop'

Adobe.CoolType.SING.Table.uniqueName.Buffer.Overflow^Default_action updated to 'drop'

Adobe.Illustrator.Encapsulated.Postscript.File.Buffer.Overflow^Default_action updated to 'drop'

Apache.IPv6.Parsing.Flaw^Default_action updated to 'drop'

Apple.IOS.Type1.Font.Code.Parsing.Privilege.Escalation^Default_action updated to 'drop'

Apple.Safari.Webkit.libxslt.Arbitrary.File.Creation^Default_action updated to 'drop'

BlueCoat.WinProxy.Telnet.DoS^Default_action updated to 'drop'

BMP.File.Width.Height.Buffer.Overflow^Severity updated to 'low'

CA.BrightStor.ARCserve.Backup.XDR.Parsing.Buffer.Overflow^Default_action updated to 'drop'

CA.BrightStor.ARCserve.UniversalAgent.Buffer.Overflow^Default_action updated to 'drop'

csSearch.Setup.Remote.Command.Execution^Default_action updated to 'drop'

Macromedia.Flash.Media.Server.FMSAdmin.OneByte.DoS^Default_action updated to 'drop'

Mozilla.Firefox.InstallTrigger.Install.Method.Code.Execution^Default_action updated to 'drop'

MS.Font.Library.File.Buffer.Overrun^Default_action updated to 'drop'

MS.Frontpage.MSDOS.Device.Name.DoS^Default_action updated to 'drop'

MS.IE.Error.Handling.Memory.Corruption^Default_action updated to 'drop'

MS.Office.BMP.Filter.Code.Execution^Default_action updated to 'drop'

MS.Office.Excel.StartObject.Record.Code.Execution^Default_action updated to 'drop'

MS.Office.PowerPoint.File.Path.Handling.Buffer.Overflow^Default_action updated to 'drop'

MS.SMB.PIPE.DoS^Default_action updated to 'drop'

MS.SMB.Server.pathname.Buffer.Overflow^Default_action updated to 'drop'

MS.Visual.Basic.DataGrid.ActiveX.Control.Memory.Corruption^Default_action updated to 'drop'

MS.Windows.Print.Spooler.Service.GetPrinterData.DoS^Default_action updated to 'drop'

MS.Windows.User32.DLL.ANI.Stack.Overflow^Default_action updated to 'drop'

MS.Word.Font.Parsing.Buffer.Overflow^Default_action updated to 'drop'

Multiple.AV.Invalid.Checksum.Bypass^Default_action updated to 'drop'

Novell.Client.Call-back-url.Parameter.Overflow^Default_action updated to 'drop'

Novell.eDirectory.LDAP.NULL.Search.Parameter.Buffer.Overflow^Default_action updated to 'drop'

Novell.File.Reporter.Agent.XML.Tag.Remote.Code.Execution^Default_action updated to 'drop'

OpenBSD.FTPD.Buffer.Overrun^Default_action updated to 'drop'

Oracle.Java.Soundbank.Resource.Name.Buffer.Overflow^Default_action updated to 'drop'

PDF.With.Launch.Action^Default_action updated to 'drop'

PeaZIP.Archived.FileName.Command.Injection^Default_action updated to 'drop'

PHP.Ultimate.PHP.Board.Code.Execution^Default_action updated to 'drop'

SIP.OpenSBC.Invite.DoS^Default_action updated to 'drop'

Solaris.Sadmind.Weak.Authentication^Default_action updated to 'drop'

SpamThru.Trojan^Default_action updated to 'drop'

SSL.PCT.Buffer.Overflow^Default_action updated to 'drop'

Sun.Board.Multiple.File.Inclusion^Status updated to 'enable'

Sun.Java.Web.Start.JNLP.Buffer.Overflow^Default_action updated to 'drop'

Sybase.M-Business.Anywhere.agSoap.Closing.Tag.Buffer.Overflow^Default_action updated to 'drop'

Symantec.Alert.Management.System.HNDLRSVC.Command.Execution^Default_action updated to 'drop'

ToolTalk.ttdbserverd.Access^Default_action updated to 'drop'

TotalCalendar.Multiple.Remote.File.Inclusion^Status updated to 'enable'

VLC.Media.Player.SMB.Win32AddConnection.Buffer.Overflow^Default_action updated to 'drop'

Wireshark.Insecure.Search.Path.Script.Execution^Default_action updated to 'drop'

IPS - 3.140 - Wed, 25 Jan 2012 23:43:00 -0800

xmlrpc — Thu, 26 Jan 2012 07:43:00 +0000

DB Version:

3.140

Num New:

New:

Novell.Netware.XNFS.NLM.STAT.Notify.Remote.Code.Execution^high

Num Enhanced:

Enhanced:

BrightStor.ARCserve.Probe.Buffer.Overflow^high

MS.IE.FTP.Client.Folder.Traversal^high

Num Attribute Changed:

Attribute Changed:

Apache.Mod.Isapi.Dangling.Pointer.Code.Execution^Default_action updated to 'drop'

Apple.Safari.Parent.Close.Use.After.Free.Code.Execution^Default_action updated to 'drop'

Backdoor.AgentInfo^Default_action updated to 'drop'

Backdoor.EvilFTP^Default_action updated to 'drop'

Backdoor.GirlFriend^Default_action updated to 'drop'

Backdoor.Millenium^Default_action updated to 'drop'

BOOTP.Boot.File.Name.Buffer.Overflow^Default_action updated to 'drop'

CodeAvalanche.News.SQL.Injection^Default_action updated to 'drop'

Coppermine.Photo.Gallery.ThumbNails.PHP.SQL.Injection^Default_action updated to 'drop'

ExoPHPDesk.faq.php.Remote.SQL.Injection^Default_action updated to 'drop'

Fp30reg.Overflow^Default_action updated to 'drop'

Fullaspsite.Asp.Hosting.SQL.Injection^Default_action updated to 'drop'

HP.OpenView.Network.Node.Manager.Buffer.Overflow^Default_action updated to 'drop'

HP.Openview.Network.Node.Manager.Toolbar.Buffer.Overflow^Default_action updated to 'drop'

HP.OpenView.NNM.CGI.Applications.Buffer.Overflow^Default_action updated to 'drop'

HP.OpenView.NNM.OVAS.Pre.Authentication.Buffer.Overflow^Default_action updated to 'drop'

LSASS.LDAP.Stack.Overflow^Default_action updated to 'drop'

Modem.ATH.Hangup^Default_action updated to 'drop'

MonitorLine.Links.Management.Index.PHP.SQL.Injection^Default_action updated to 'drop'

MS.DotNet.Pointer.Verification.Code.Execution^Default_action updated to 'drop'

MS.Excel.Calendar.Object.SRP.Stream.Bad.Value.Code.Execution^Default_action updated to 'drop'

MS.Excel.FRTWrapper.Record.Code.Execution^Default_action updated to 'drop'

MS.Excel.SLK.Buffer.Overflow^Default_action updated to 'drop'

MS.GDIPLUS.BMP.Width.Parsing.Remote.Code.Execution^Default_action updated to 'drop'

MS.IE.HTML.Object.PKMAXCTL.DLL.Memory.Corruption^Default_action updated to 'drop'

MS.IE.Mshtml.Dll.HTML.Parsing.DoS^Default_action updated to 'drop'

MS.IE.URLMon.DLL.BGSOUND.DoS^Default_action updated to 'drop'

MS.IIS.FTP.NLST.Remote.Code.Execution^Default_action updated to 'drop'

MS.MSXML.DTD.Cross.Domain.Scripting^Default_action updated to 'drop'

MS.PowerPoint.Floating.Point.Time.Bandit.Code.Execution^Default_action updated to 'drop'

MS.Shell.Handler.Remote.Code.Execution^Default_action updated to 'drop'

MS.SMB.Handlers.Remote.Buffer.Overflow^Default_action updated to 'drop'

MS.SMB2.Negotiation.Handler.Code.Execution^Default_action updated to 'drop'

MS.SQL.Server.Sp_replwritetovarbin.Memory.Overwrite^Default_action updated to 'drop'

MS.Vista.Negotiate.Dialects.DoS^Default_action updated to 'drop'

MS.Windows.Media.Player.Invalid.Pointer.Operation^Default_action updated to 'drop'

MS.Windows.MSDTC.Denial.Of.Service^Default_action updated to 'drop'

MS.Word.Malformed.Value.Memory.Corruption^Default_action updated to 'drop'

MS.Word.PlfLfo.Memory.Corruption^Default_action updated to 'drop'

OpenLDAP.Modrdn.RDN.String.Memory.Corruption^Default_action updated to 'drop'

Oracle.Application.Server.10g.OPMN.Service.Http.Format.String^Default_action updated to 'drop'

PHF.Qname.Parameter.Command.Execution^Default_action updated to 'drop'

Philboard.Philboardforum.Asp.SQL.Injection^Default_action updated to 'drop'

PHP.showcode.php.PAGE.Parameter.File.Inclusion^Default_action updated to 'drop'

Rlogind.Service.Froot.Authentication.Bypass^Default_action updated to 'drop'

SaveWeb.Portal.File.Inclusion^Default_action updated to 'drop'

SIPfoundry.SIPXtapi.CSeq.Buffer.Overflow^Default_action updated to 'drop'

Snitz.Forums.Pop_Profile.SQL.Injection^Default_action updated to 'drop'

SNMP.Trap.Service.GET.Request.DoS^Default_action updated to 'drop'

Sun.Solaris.Telnet.Remote.Authentication.Bypass^Default_action updated to 'drop'

W32.CodeRed^Default_action updated to 'drop'

IPS - 3.139 - Tue, 24 Jan 2012 23:20:00 -0800

xmlrpc — Wed, 25 Jan 2012 07:20:00 +0000

DB Version:

3.139

Num New:

New:

AUTOMGEN.Project.File.Processing.Use.After.Free^high

DNS.BailiWicked.Domain.Attack^low

eFront.Multiple.Parameters.XSS.And.SQL.Vulnerabilities^medium

GFI.Faxmaker.Divide.By.Zero.DoS^medium

ISC.DHCP.Hostname.Option.Buffer.Overflow^critical

Kool.Media.Converter.ogg.File.Parsing.Buffer.Overflow^medium

Merethis.Centreon.Command.Name.Parameter.Remote.Code.Execution^medium

MS.Windows.HTTP.Services.Integer.Underflow^critical

MS.Windows.TCPIP.Stack.DoS^medium

Netscape.Server.WP.Tag.Directory.List.Disclosure^medium

Novell.Netware.XNFS.NLM.NFS.Rename.Remote.Code.Execution^high

Novell.Netware.XNFS.xdrDecodeString.Remote.Code.Execution^high

Opera.Browser.Escape.Sequence.DoS^medium

Oracle.9i.HTTP.Server.Soap.Router.Access^medium

Oracle.9iAS.Unautheticated.User.Access.To.Sensitive.Services^medium

Oracle9i.Default.Configuration.File.Information.Disclosure^medium

Oracle9i.OWA_UTIL.Unauthorized.Stored.Procedure.Access^medium

Plone.Zope.Remote.Command.Execution^high

PROMATIC.ActiveX.GetPromoticSite.Method.Remote.Code.Execution^high

Symphony.CMS.Filter.Parameter.SQL.Injection^medium

VMware.Vmwarbase.ISO.File.Overflow^high

ZOHO.ManageEngine.ADSelfService.Plus.SearchString.XSS^medium

Num Enhanced:

Enhanced:

Aardvark.Topsites.PHP.Remote.Command.Execution^high

Adobe.Acrobat.ICC.ProfileDescriptionTag.Buffer.Overflow^critical

Adobe.PDF.U3D.File.Memory.Corruption^high

Apple.QuickTime.Player.Logging.Buffer.Overflow^medium

Avaya.WinPDM.Multiple.Overflow^medium

Citrix.Provisioning.Services.Streamprocess.Buffer.Overflow^critical

DameWare.Mini.Remote.Control.Server.Buffer.Overflow^high

Hyleos.ChemView.ActiveX.Control.Stack.Overflow^high

IBM.Tivoli.Endpoint.Opts.Argument.Remote.Code.Execution^high

Integramod.Portal.Phpbb_Root_Path.File.Inclusion^medium

Mambo.Galleria.galleria.html.php.File.Inclusion^medium

MS.ASP.NET.Form.Authentication.Insecure.Redirect^medium

MS.ASP.NET.Request.Object.DoS^high

MS.IE.JSWindow.Bodyonload.Tag.Code.Execution^medium

MS.IIS.Malformed.URL.DoS^medium

MS.OpenType.Compact.Font.Format.Driver.Remote.Code.Execution^high

MS.Visual.Basic.VBP_Open.Project.File.Handling.Buffer.Overflow^high

MS.Windows.ATMFD.Font.Driver.Remote.Code.Execution^critical

MS.Windows.Embedded.Packager.Remote.Code.Execution^high

MS.Windows.Object.Packager.Insecure.Remote.Code.Execution^high

Multiple.Mozilla.Products.IFRAME.JavaScript.Execution^low

Sun.Board.Multiple.File.Inclusion^high

Tagger.LE.Tags.PHP.File.Inclusion^medium

TotalCalendar.Multiple.Remote.File.Inclusion^medium

UBB.threads.Addpost.newpoll.PHP.Remote.File.Inclusion^medium

WebProvence.Spaw.control.class.PHP.Remote.File.Inclusion^medium

WTools.Common.PHP.Remote.File.Inclusion^medium

XAMPP.WEBDAV.Malicious.PHP.File.Upload^medium

Num Renamed:

Renamed:

Mambo.Galleria.galleria.html.php.File.Inclusion^Previous name: "Galleria.galleria.html.php.File.Inclusion"

Num Deprecated:

Deprecated:

Gumblar.Botnet.CC^critical

Imrabot.Botnet.CC^high

Suspicious.File^medium

Num Attribute Changed:

Attribute Changed:

3Com.3CDaemon.FTP.Server.Buffer.Overflow^Default_action updated to 'drop'

4D.WebStar.FTP.Command.Buffer.Overflow^Default_action updated to 'drop'

CA.BrightStor.ARCserve.Backup.Agent.Buffer.Overflow^Default_action updated to 'drop'

CCProxy.Telnet.Proxy.Ping.Overflow^Default_action updated to 'drop'

CGI.CSGuestbook.Remote.Code.Execution^Default_action updated to 'drop'

Cisco.AnyConnect.VPN.Client.ActiveX.Code.Execution^Default_action updated to 'drop'

EasyFTP.FTP.Commands.Buffer.Overflow^Default_action updated to 'drop'

FlexByte.SolarFTP.Command.Buffer.Overflow^Default_action updated to 'drop'

HTTP.URI.XSS^Default_action updated to 'drop'

Mozilla.Firefox.iframe.designMode.Code.Execution^Default_action updated to 'drop'

Mozilla.Firefox.InstallVersion.compareTo.Buffer.Overflow^Default_action updated to 'drop'

Mozilla.Firefox.XBL.Code.Execution^Default_action updated to 'drop'

MS.DXMedia.SDK6.SourceUrl.ActiveX.Remote.Code.Execution^Default_action updated to 'drop'

MS.IE.DDHTML.Object.Race.Condition.Memory.Corruption^Default_action updated to 'drop'

MS.IE.Implicit.Drag.And.Drop.File.Installation^Default_action updated to 'drop'

MS.IE.Install.Engine.ActiveX.Buffer.Overflow^Default_action updated to 'drop'

MS.IE.Javaprxy.Dll.COM.Object.Instantiation.Heap.Overflow^Default_action updated to 'drop'

MS.IE.Malicious.Popups^Default_action updated to 'drop'

MS.IE.Memory.Corruption^Default_action updated to 'drop'

MS.IE.Mshtml.DLL.Script.Action.Handler.Buffer.Overflow^Default_action updated to 'drop'

MS.IE.NON.ActiveX.COM.Object.Instantiation.Memory.Corruption^Default_action updated to 'drop'

MS.IE.Object.Type.Buffer.Overflow^Default_action updated to 'drop'

MS.IE.Popup.Object.Type.Validation^Default_action updated to 'drop'

MS.IE.XML.Page.Object.Type.Validation^Default_action updated to 'drop'

MS.IIS.Chunked.Encoding.Heap.Buffer.Overflow^Default_action updated to 'drop'

MS.IIS.IDQ.Path.Disclosure^Default_action updated to 'drop'

MS.IIS.ISAPI.Extension.Buffer.Overflow^Default_action updated to 'drop'

MS.IIS.ISAPI.HTR.Extension.Buffer.Overflow^Default_action updated to 'drop'

MS.IIS.URL.Redirect.Request.DoS^Default_action updated to 'drop'

MS.IIS.W3who.Dll.ISAPI.Remote.Buffer.Overflow^Default_action updated to 'drop'

MS.IIS.Wildcard.DoS^Default_action updated to 'drop'

MS.WIN2K.TroubleShooter.ActiveX.Control.Buffer.Overflow^Default_action updated to 'drop'

MS.Windows.ASN.1.Bitstring.Heap.Overflow^Default_action updated to 'drop'

MS.Windows.LSASS.Remote.Buffer.Overflow^Default_action updated to 'drop'

MS.Word.WWLib.DLL.Buffer.Overflow^Default_action updated to 'drop'

NetTerm.NetFTPD.USER.Command.Buffer.Overflow^Default_action updated to 'drop'

OpenSSL.SSLv2.Malformed.Client.Key.Buffer.Overflow^Default_action updated to 'drop'

Oracle.9i.XDB.FTP.Pass.Overflow^Default_action updated to 'drop'

Oracle.HTTP.Server.Isqlplus.XSS^Default_action updated to 'drop'

Quick.TFTP.Server.Mode.Remote.Buffer.Overflow^Default_action updated to 'drop'

Sendmail.Prescan.Address.Buffer.Overflow^Default_action updated to 'drop'

Sun.iPlanet.WebServer.Admin.Server.XSS^Default_action updated to 'drop'

SUN.JavaWebStart.JNLP.Property.Tags.Unauthorized.Access^Default_action updated to 'drop'

Trivial.File.Transfer.Protocol.Information.Disclosure^Default_action updated to 'drop'

Trojan.Doly^Default_action updated to 'drop'

UW.Imapd.Daemon.Login.Buffer.Overflow^Default_action updated to 'drop'

Veritas.Backup.Exec.Agent.CONNECT_CLIENT_AUTH.Buffer.Overflow^Default_action updated to 'drop'

WarFTP.Username.Stack.Buffer.Overflow^Default_action updated to 'drop'

WhitSoft.SlimFTPd.Commands.Buffer.Overflow^Default_action updated to 'drop'

Xitami.HTTP.If.Modified.Since.Remote.Buffer.Overflow^Default_action updated to 'drop'

IPS - 3.138 - Fri, 20 Jan 2012 00:16:00 -0800

xmlrpc — Fri, 20 Jan 2012 08:16:00 +0000

DB Version:

3.138

Num New:

New:

AWStats.Configdir.Command.Execution^high

CoCSoft.Stream.Down.Response.Processing.Buffer.Overflow^high

PEAR.XMLRPC.XML.File.Code.Injection^high

Splunk.Search.Remote.Code.Execution^high

Num Enhanced:

Enhanced:

Adobe.PDF.U3D.File.Memory.Corruption^high

Bajie.HTTP.JServer.CGI.Remote.Command.Execution^high

Libtelnet.Key.Remote.Buffer.Overflow^critical

MS.Excel.SLK.Buffer.Overflow^high

MS.IIS.WebDAV.Authentication.Bypass^medium

MS.OpenType.CFF.Driver.Remote.Code.Execution^high

MS.Windows.LNK.File.Code.Execution^critical

Sun.Solaris.DHCP.Malformed.BOOTP.Packet.DoS^medium

IPS - 3.137 - Wed, 18 Jan 2012 23:42:00 -0800

xmlrpc — Thu, 19 Jan 2012 07:42:00 +0000

DB Version:

3.137

Num Enhanced:

Enhanced:

Symantec.Antivirus.Real.Time.Virus.Scan.Service.Buffer.Overflow^critical

VLC.Media.Player.SMB.Win32AddConnection.Buffer.Overflow^high

Num Deprecated:

Deprecated:

Agobot.Phatbot.Botnet.CC^high

Bredolab.Botnet.CC^critical

Measuresoft.ScadaPro.Multiple.Security.Remote.Code.Execution^high

IPS - 3.136 - Wed, 18 Jan 2012 01:40:00 -0800

xmlrpc — Wed, 18 Jan 2012 09:40:00 +0000

DB Version:

3.136

Num New:

New:

CoDeSys.SCADA.Remote.Code.Execution^high

Cyrus.IMAPD.POP3D.Remote.Buffer.Overflow^high

FTP.Bounce.Port.Scanner^low

Kiwi.CatTools.TFTP.Directory.Traversal^critical

Libtelnet.Key.Remote.Buffer.Overflow^critical

MS.Publisher.Pubconv.dll.Pointer.Overwrite.Memory.Corruption^critical

Oracle.Java.Software.Update.Weakness^high

PHPBB.Viewtopic.Highlight.Remote.Code.Execution^high

Rsyslog.Stack.Buffer.Overflow^medium

Num Enhanced:

Enhanced:

BEA.Weblogic.Double.Dot.Buffer.Overflow^critical

HTTP.Response.Splitting.Information.Disclosure^medium

MagicISO.Maker.Cue.File.Stack.Overflow^high

MS.Anti.XSS.Library.Bypass.Information.Disclosure^high

MS.ASP.Net.Forms.Authentication.Bypass^high

MS.Host.Integration.Server.RPC.Service.Code.Execution^critical

MS.IE.DOM.Modification.Memory.Corruption^high

MS.Office.PowerPoint.OfficeArt.Shape.RCE.Memory.Corruption^high

MS.PPT.Invalid.TimeColorBehaviorContainer.Remote.Code.Execution^high

MS.Shell.Handler.Remote.Code.Execution^high

MS.Visio.Compressed.Document.Packaged.Object.Code.Execution^critical

MS.Visio.Insecure.MFC.Dll.Loading^high

MS.VS.WMI.Object.Broker.ActiveX.Code.Execution^critical

MS.Windows.Media.MIDI.Remote.Code.Execution^critical

Multiple.Player.S3m.Buffer.Overflow^high

PHF.Qname.Parameter.Command.Execution^high

VideoLAN.VLC.Media.Player.MKV.Remote.Code.Execution^high

Num Renamed:

Renamed:

WTools.Common.PHP.Remote.File.Inclusion^Previous name: "WTools.Common.PHP.Remote.File.Include"

Num Attribute Changed:

Attribute Changed:

Bajie.HTTP.JServer.CGI.Remote.Command.Execution^Severity updated to 'high'

FrontAccounting.Config.PHP.File.Inclusion^Severity updated to 'low'

Horde.Eval.Poor.Input.Validation^Severity updated to 'low'

HP.UX.LPD.Arbitrary.Command.Execution^Severity updated to 'high'

HTTP.Response.Splitting.Information.Disclosure^Default_action updated to 'pass'

IMAP.APPEND.Command.Buffer.Overflow^Severity updated to 'medium'

Mozilla.Firefox.Arbitrary.HTTP.Request.Injection^Severity updated to 'low'

MS.ASP.NET.Form.Authentication.Insecure.Redirect^Severity updated to 'medium'

MS.DirectX.DirectShow.Buffer.Overflow^Severity updated to 'low'

MS.IE.DOM.Modification.Memory.Corruption^Default_action updated to 'pass'

MS.RDS.Dataspace.ActiveX.Access^Severity updated to 'low'

MS.Visio.Compressed.Document.Packaged.Object.Code.Execution^Default_action updated to 'pass'

MS.VS.WMI.Object.Broker.ActiveX.Code.Execution^Default_action updated to 'pass'

MS.Windows.XP.HCP.URI.Handler.Arbitrary.Command.Execution^Severity updated to 'low'

RealPlayer.SWF.Parsing.Heap.Overflow^Severity updated to 'low'

Storm.Krackin.Botnet.CC^Severity updated to 'low'

VideoLAN.VLC.Media.Player.MKV.Remote.Code.Execution^Default_action updated to 'pass'

WANewsletter.Waroot.Parameter.File.Inclusion^Severity updated to 'low'

Xoops.Horoscope.Module.Footer.PHP.File.Inclusion^Severity updated to 'low'

Xoops.Multiple.Modules.SpawControl.Class.PHP.File.Inclusion^Severity updated to 'low'

IPS - 3.135 - Thu, 12 Jan 2012 23:43:00 -0800

xmlrpc — Fri, 13 Jan 2012 07:43:00 +0000

DB Version:

3.135

Num Enhanced:

Enhanced:

Adobe.U3D.CLOD.Mesh.Declaration.Array.Buffer.Overflow^critical

GAlan.Galan.File.Stack.Overflow^high

IDEAL.Administration.IPJ.File.Buffer.Overflow^high

MS.Office.Visio.DXF.File.Stack.Buffer.Overflow^high

MS.Windows.LSASS.Remote.Buffer.Overflow^high

Real.Netzip.Classic.File.Parsing.Buffer.Overflow^high

TugZip.File.Parsing.Buffer.Overflow^critical

UltraISO.CCD.Buffer.Overflow^critical

VariCAD.DWB.File.Stack.Overflow^high

ZIP.File.Document.Title.Buffer.Overflow^high

Num Attribute Changed:

Attribute Changed:

Adobe.Acrobat.Reader.Shell.Metacharacter.Code.Execution^Default_action updated to 'drop'

Adobe.Flash.Player.Authplay.Dll.SWF.File.Handle.Code.Execution^Default_action updated to 'drop'

Adobe.Flash.Remote.Memory.Corruption^Default_action updated to 'drop'

Adobe.Reader.Spell.CustomDictionaryOpen.Remote.Code.Execution^Default_action updated to 'drop'

Adobe.U3D.CLOD.Mesh.Declaration.Array.Buffer.Overflow^Default_action updated to 'pass'

AOL.Desktop.Rtx.File.Remote.Buffer.Overflow^Default_action updated to 'drop'

Apple.QuickTime.Movie.File.Component.Name.Integer.Overflow^Default_action updated to 'drop'

Asterisk.Skinny.Channel.Driver.Remote.DoS^Default_action updated to 'drop'

Asterisk.T.38.Buffer.Overflow^Default_action updated to 'drop'

Eudora.URL.Handling.Buffer.Overflow^Default_action updated to 'drop'

HP.OpenView.Storage.Data.Protector.Stack.Buffer.Overflow^Default_action updated to 'drop'

HP.Power.Manager.FormExportDataLogs.Buffer.Overflow^Default_action updated to 'drop'

IBM.Lotus.Notes.123File.Viewer.Remote.Buffer.Overflow^Default_action updated to 'drop'

LibPNG.tRNS.BufferOverflow^Default_action updated to 'drop'

Mozilla.Firefox.JS.Engine.Function.Integer.Overflow^Default_action updated to 'drop'

MS.Access.Snapshot.Viewer.ActiveX.Control.File.Download^Default_action updated to 'drop'

MS.CMM.ICC.Profile.Buffer.Overflow^Default_action updated to 'drop'

MS.Excel.Sxview.Record.iCache.Code.Execution^Default_action updated to 'drop'

MS.Exchange.Server.iCal.Request.DoS^Default_action updated to 'drop'

MS.Exchange.Server.Outlook.Web.Access.Script.Injection^Default_action updated to 'drop'

MS.Explorer.Long.Share.Name.Buffer.Overflow^Default_action updated to 'drop'

MS.IE.Cached.Object.Zone.Bypass^Default_action updated to 'drop'

MS.IIS.IndexServer.Disclosure^Default_action updated to 'drop'

MS.Malware.Protection.Engine.File.Processing.DoS^Default_action updated to 'drop'

MS.Paint.JPEG.Integer.Overflow^Default_action updated to 'drop'

MS.Project.PropList.Pid.Memory.Corruption^Default_action updated to 'drop'

MS.RRAS.RasRpcSubmitRequest.Buffer.Overflow^Default_action updated to 'drop'

MS.SQL.Server.sqldmo.dll.Code.Execution^Default_action updated to 'drop'

MS.Windows.CreateSizedDIBSECTION.Thumbnail.View.Stack.Overflow^Default_action updated to 'drop'

MS.Windows.HTML.Help.Control.CrossZone.Scripting^Default_action updated to 'drop'

MS.Windows.Message.Queuing.RPC.QMCOMM.Code.Execution^Default_action updated to 'drop'

MS.Windows.Sapi.Dll.ActiveX.Control.Access^Default_action updated to 'drop'

MS.Windows.WINS.Memory.Corruption^Default_action updated to 'drop'

MS.Windows.WKSSVC.Privilege.Elevation^Default_action updated to 'drop'

MS.Windows.X509.OID.Spoofing^Default_action updated to 'drop'

MS.Word.Document.Stream.Handling.Code.Execution^Default_action updated to 'drop'

MySQL.YaSSL.Certificate.Packet.Buffer.Overflow^Default_action updated to 'drop'

Novell.GroupWise.iCal.RRULE.Time.Conversion.Invalid.Array.Index^Default_action updated to 'drop'

Novell.GroupWise.Messenger.Buffer.Overflow^Default_action updated to 'drop'

Oracle.9i.Application.Server.Web.Cache.DoS^Default_action updated to 'drop'

Oracle.Secure.Backup.EXEC.QR.URI.Command.Injection^Default_action updated to 'drop'

SIP.Phone.Proxy.Authentication.Required.Credential.Disclosure^Default_action updated to 'drop'

SSL.PCT.Overflow^Default_action updated to 'drop'

TippingPoint.IPS.Reverse.DNS.Lookup.Domain.Name.Overflow^Default_action updated to 'drop'