*** EX RELS 03312 Release *** Total number of signatures: 6049 Description ================================================================== In this signature, we addressed the exploits/vulnerabilities and applications as below: Added 23 rule(s): --------------- 1130588 POP3 Brute Force Login 1133407 WEB Brute Force Login -1 1133408 WEB Brute Force Login -2 1133421 WEB-CLIENT Microsoft Windows OLE Automation Array Remote Code Execution Vulnerability -8 (CVE-2014-6332) 1133428 NTP Network Time Protocol Daemon read_mru_list Denial of Service -1 (CVE-2016-7434) 1133432 VIRUS Eicar test string -4 1133435 WEB Trend Micro Smart Protection Server ccca_ajaxhandler.php Command Injection -1 (CVE-2016-6266) 1133438 WEB-CLIENT Cisco WebEx Chrome Extension Remote Code Execution (CVE-2017-3823) 1133441 WEB-CLIENT Generic Javascript Obfuscation -14 1133442 WEB-CLIENT Microsoft IE MIME Header Attachment Execution Vulnerability -1 (CVE-2001-0154) 1133443 WEB-CLIENT Microsoft IE MIME Header Attachment Execution Vulnerability -2 (CVE-2001-0154) 1133444 WEB-CLIENT Microsoft IE MIME Header Attachment Execution Vulnerability -3 (CVE-2001-0154) 1133445 WEB-CLIENT Microsoft IE MIME Header Attachment Execution Vulnerability -4 (CVE-2001-0154) 1133446 WEB-CLIENT Microsoft IE MIME Header Attachment Execution Vulnerability -5 (CVE-2001-0154) 1133448 WEB Multiple NETGEAR Products Information Disclosure Vulnerability (CVE-2017-5521) 1133449 SMB Microsoft SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability (CVE-2017-0016) 1133451 WEB Cross-site Scripting -36 1133453 SSH D-Link DWR-932B Backdoor Access -1 (CVE-2016-10177) 1133454 SSH D-Link DWR-932B Backdoor Access -2 (CVE-2016-10177) 1160101 IM AIM/ICQ/iIM access via SSL -4 1160102 IM Gadu-Gadu access via SSL -1 1160103 IM Imvu access via TCP -1 1160104 MEDIA Amazon Video media via TCP -13 Modified 14 rule(s): --------------- 1053205 IM Gadu-Gadu login via TCP -2 1059594 WEB ElasticSearch Dynamic Script Arbitrary Java Execution (CVE-2014-3120) 1060205 IM Imvu login via SSL -1 1064162 IM QQ/TM login via UDP -1 1069531 VOIP TeamSpeak login via UDP -3 1132120 WEB Generic Remote Javascript Upload and Execution -2.a 1132591 TELNET Brute Force Login 1133214 WEB-CLIENT Microsoft Scripting Engine Memory Corruption Vulnerability -1 (CVE-2016-7242) 1133293 FILE Microsoft Windows Graphics Component CVE-2016-7272 Remote Code Execution (CVE-2016-7272) 1133295 WEB-CLIENT Microsoft Internet Explorer CWigglyShape Information Disclosure (CVE-2016-7283) 1133374 WEB Zyxel P660HN-T v1 Router Unauthenticated Remote Command Execution 1133375 WEB Zyxel P660HN-T v2 Router Unauthenticated Remote Command Execution 1133376 WEB Billion 5200W-T Router Unauthenticated Remote Command Execution 1133377 WEB Billion 5200W-T Router Authenticated Remote Command Execution Deleted 0 rule(s): ---------------