*** EX RELS 03373 Release *** Total number of signatures: 6014 Description ================================================================== In this signature, we addressed the exploits/vulnerabilities and applications as below: Added 11 rule(s): --------------- 1134544 WEB GitStack Unsanitized Argument RCE (CVE-2018-5955) 1134545 WEB ManageEngine Applications Manager Remote Code Execution (CVE-2018-7890) 1134546 FILE Microsoft Office EQNEDT32 CVE-2018-0802 FONT Stack Buffer Overflow -1 1134548 FILE Microsoft Windows EOT Font Engine Information Disclosure Vulnerability (CVE-2018-0855) 1134550 TELNET Default Password Login -24 1134551 TELNET Default Password Login -25 1134552 TELNET Default Password Login -26 1160904 UPDATE Norton access via TCP -2 1160905 UPDATE McAfee access via TCP -1 1160906 UPDATE Kaspersky access via TCP -1 1160907 UPDATE F-Secure transfer via SSL -1 Modified 332 rule(s): --------------- 1057214 WEB Microsoft SharePoint Directory Traversal Vulnerability (CVE-2013-0084) 1060724 TCP port 19638 traffic (eg. Ensim) 1060731 TCP port 8086 traffic (eg. HELM Web) 1060734 TCP port 8087 traffic (eg. Accelerator Control Panel) 1060738 TCP port 2082 traffic (eg. Infowave) 1060742 TCP port 14552 traffic (eg. Lasso) 1060743 TCP port 34443 traffic (eg. Linksys) 1060755 TCP port 9535 traffic (eg. Mngsuite) 1060760 TCP port 24444 traffic (eg. NetBeans) 1060768 TCP port 19771 traffic (eg. Softros) 1060772 TCP port 28395 traffic (eg. Smart SaleR 5) 1060798 TCP port 11576 traffic (eg. IPStor) 1060805 TCP port 6619 traffic (eg. Odette-ftps) 1060814 TCP port 9898 traffic (eg. MonkeyCom) 1060816 TCP port 9119 traffic (eg. MXit Instant Messenger) 1060820 TCP port 9418 traffic (eg. Git) 1060822 TCP port 6522 traffic (eg. Gobby) 1060828 TCP port 8243 traffic (eg. Apache Synapse) 1060837 TCP port 32245 traffic (eg. MMTSG-mutualed) 1060845 TCP port 10008 traffic (eg. Octopus) 1060851 TCP port 9090 traffic (eg. Openfire) 1060852 TCP port 9091 traffic (eg. Openfire) 1060859 TCP port 9100 traffic (eg. PDL) 1060862 TCP port 8118 traffic (eg. Privoxy-advertisement-filtering) 1060877 TCP port 16000 traffic (eg. ShroudBNC) 1060879 TCP port 6110 traffic (eg. Softcm HP Softbench) 1060883 TCP port 31415 traffic (eg. ThoughtSignal-Server) 1060893 TCP port 18605 traffic (eg. X-BEAT) 1060898 TCP port 10050 traffic (eg. Zabbix Agent) 1060900 TCP port 10051 traffic (eg. Zabbix Trapper) 1060912 TCP port 6086 traffic (eg. PDTP-FTP) 1060916 TCP port 8888 traffic (eg. GNUmp3d) 1060951 TCP port 9001 traffic (eg. Sharepoint-wiki) 1060966 TCP port 10114 traffic (eg. NetIQ Qcheck) 1060968 TCP port 10116 traffic (eg. NetIQ VoIP Assessor) 1060970 TCP port 10115 traffic (eg. NetIQEndpoint) 1060986 TCP port 20720 traffic (eg. Symantec i3) 1061005 TCP port 6969 traffic (eg. WatchGuard SSLVPN) 1061009 TCP port 6101 traffic (eg. BackupExec) 1061013 TCP port 9101 traffic (eg. Bacula) 1061014 TCP port 9102 traffic (eg. Bacula) 1061015 TCP port 9103 traffic (eg. Bacula) 1061028 TCP port 6445 traffic (eg. Sun Grid Engine-Execution) 1061030 TCP port 6444 traffic (eg. Sun Grid Engine-Qmaster) 1061054 TCP port 2000 traffic (eg. Cisco SCCP) 1061060 TCP port 19813 traffic (eg. WatchGuard WSM Management) 1061067 TCP port 10025 traffic (eg. Ximbra) 1061068 TCP port 7047 traffic (eg. Zimbra) 1061069 TCP port 7025 traffic (eg. Zimbra) 1061075 TCP port 7307 traffic (eg. Zimbra MySQL) 1061077 TCP port 7306 traffic (eg. Zimbra MySQL) 1061079 TCP port 10024 traffic (eg. Zimbra SMTP) 1061080 TCP port 6502 traffic (eg. Danware) 1061099 TCP port 8000 traffic (eg. IRDMI) 1061107 TCP port 30564 traffic (eg. Multiplicity) 1061129 UDP port 2000 traffic (eg. Cisco SCCP) 1061182 TCP port 8222 traffic (eg. VMWare) 1061183 TCP port 8333 traffic (eg. VMWare) 1061223 TCP port 8002 traffic (eg. Cisco Systems) 1061266 TCP port 6789 traffic (eg. Datalogger) 1061269 TCP port 6112 traffic (eg. Dtspcd) 1061271 TCP port 6111 traffic (eg. HP Softbench) 1061452 TCP port 8400 traffic (eg. Cvp) 1061492 TCP port 9300 traffic (eg. IBM CogNOs) 1061800 TCP port 10000 traffic (eg. Network Data Management) 1061802 TCP port 10001 traffic (eg. SCP) 1061804 TCP port 10002-10005 traffic (eg. EMC Network) 1061820 TCP port 10100 traffic (eg. VERITAS) 1061822 TCP port 10101-10103 traffic (eg. eZSystem) 1061824 TCP port 10104 traffic (eg. Systemwalker Desktop Patrol) 1061826 TCP port 10107 traffic (eg. VERITAS) 1061828 TCP port 10110 traffic (eg. NMEA-0183 Navigational Data) 1061830 TCP port 10113-10116 traffic (eg. NetIQ System) 1061832 TCP port 10128-10129 traffic (eg. BMC General Manager Server) 1061834 TCP port 10160 traffic (eg. QB Database Server) 1061836 TCP port 10200 traffic (eg. Trigence AE Soap) 1061838 TCP port 10201 traffic (eg. Remote Server Management) 1061840 TCP port 10252 traffic (eg. Apollo Relay Port) 1061842 TCP port 10260 traffic (eg. Axis WIMP Port) 1061844 TCP port 10288 traffic (eg. Blocks) 1061846 TCP port 10321 traffic (eg. Computer Op System Information Report) 1061848 TCP port 10540-10544 traffic (eg. MOS System) 1061850 TCP port 10800 traffic (eg. Gestor de Acaparamiento para Pocket PCs) 1061852 TCP port 10805 traffic (eg. LUCIA Pareja Data Group) 1061854 TCP port 10860 traffic (eg. Helix Client/Server) 1061856 TCP port 10990 traffic (eg. Auxiliary RMI Port) 1061858 TCP port 11000 traffic (eg. IRISA) 1061860 TCP port 11001 traffic (eg. Metasys) 1061862 TCP port 11106 traffic (eg. SGI LK Licensing) 1061864 TCP port 11111 traffic (eg. Viral Computing Environment (VCE)) 1061866 TCP port 11112 traffic (eg. DICOM) 1061868 TCP port 11161-11164 traffic (eg. sun cacao system) 1061870 TCP port 11201 traffic (eg. smsqp) 1061872 TCP port 11208 traffic (eg. WiFree) 1061874 TCP port 11211 traffic (eg. Memory cache) 1061876 TCP port 11319 traffic (eg. IMIP) 1061878 TCP port 11320 traffic (eg. IMIP) 1061880 TCP port 11321 traffic (eg. Arena Server Listen) 1061882 TCP port 11367 traffic (eg. ATM UHAS) 1061884 TCP port 11371 traffic (eg. OpenPGP) 1061886 TCP port 11600 traffic (eg. Tempest Port) 1061888 TCP port 11720 traffic (eg. h323 Call Signal Alternate) 1061890 TCP port 11751 traffic (eg. Intrepid) 1061892 TCP port 11967 traffic (eg. SysInfo) 1061894 TCP port 12000-12004 traffic (eg. IBM Enterprise Extender SNA System) 1061896 TCP port 12005-12006 traffic (eg. DBISAM Database Server) 1061898 TCP port 12007-12008 traffic (eg. Accuracer Database System) 1061900 TCP port 12010 traffic (eg. ElevateDB Server) 1061902 TCP port 12012-12013 traffic (eg. Vipera Messaging) 1061904 TCP port 12109 traffic (eg. RETS) 1061906 TCP port 12121 traffic (eg. NuPaper Session) 1061908 TCP port 12168 traffic (eg. CA Threat Manager System) 1061910 TCP port 12172 traffic (eg. HiveP) 1061912 TCP port 12300 traffic (eg. LinoGrid Engine) 1061914 TCP port 12321-12322 traffic (eg. Warehouse Monitoring System) 1061916 TCP port 12345 traffic (eg. Italk Chat System) 1061918 TCP port 12753 traffic (eg. tsaf port) 1061920 TCP port 13160 traffic (eg. I-ZIPQD) 1061922 TCP port 13216 traffic (eg. Black Crow Software application logging) 1061924 TCP port 13217 traffic (eg. R&S Proxy Installation Assistant) 1061926 TCP port 13218 traffic (eg. EMC Network) 1061928 TCP port 13223-13224 traffic (eg. PowWow Server/Client) 1061930 TCP port 13720 traffic (eg. VERITAS) 1061932 TCP port 13721 traffic (eg. VERITAS) 1061934 TCP port 13722 traffic (eg. BP Java MSVC) 1061936 TCP port 13724 traffic (eg. VERITAS) 1061938 TCP port 13782 traffic (eg. VERITAS) 1061940 TCP port 13783 traffic (eg. VOPIED) 1061942 TCP port 13785 traffic (eg. NetBackup Database) 1061944 TCP port 13786 traffic (eg. VERITAS) 1061946 TCP port 13818-13822 traffic (eg. DSMCC SYSTEM) 1061948 TCP port 13929 traffic (eg. D-TA SYSTEMS) 1061950 TCP port 13930 traffic (eg. MedEvolve Port Requester) 1061952 TCP port 14000 traffic (eg. SCOTTY High-Speed Filetransfer) 1061954 TCP port 14001 traffic (eg. SUA) 1061956 TCP port 14033 traffic (eg. sage Best!) 1061958 TCP port 14034 traffic (eg. sage Best!) 1061960 TCP port 14141 traffic (eg. VCS Application) 1061962 TCP port 14142 traffic (eg. IceWall Cert) 1061964 TCP port 14145 traffic (eg. GCM Application) 1061966 TCP port 14149-14154 traffic (eg. VERITAS) 1061968 TCP port 14250 traffic (eg. Fencing Server) 1061970 TCP port 14414 traffic (eg. CA Threat Manager System) 1061972 TCP port 14936-14937 traffic (eg. hde-lcesrvr) 1061974 TCP port 15000 traffic (eg. Hypack Data Aquisition) 1061976 TCP port 15345 traffic (eg. XPilot Contact Port) 1061978 TCP port 15363 traffic (eg. 3Link Negotiation) 1061980 TCP port 15555 traffic (eg. Cisco Network) 1061982 TCP port 15660 traffic (eg. Backup Express Restore Server) 1061984 TCP port 15740 traffic (eg. Picture Transfer) 1061986 TCP port 16161-16162 traffic (eg. Solaris SEA / Audit) 1061988 TCP port 16309 traffic (eg. etb4j) 1061990 TCP port 16310 traffic (eg. Policy Distribute/Update Notification) 1061992 TCP port 16311 traffic (eg. Policy definition and update management) 1061994 TCP port 16360-16368 traffic (eg. Network Serial Extension Ports One-Four) 1061996 TCP port 16384 traffic (eg. Connected Corp) 1061998 TCP port 16619 traffic (eg. X509 Objects Management) 1062000 TCP port 16900 traffic (eg. Newbay Mobile Client Update) 1062002 TCP port 16950 traffic (eg. Simple Generic Client Interface) 1062004 TCP port 16991 traffic (eg. Intel RCI) 1062006 TCP port 16992-16993 traffic (eg. Intel(R) AMT) 1062008 TCP port 16994-16995 traffic (eg. Intel(R) AMT) 1062010 TCP port 17185 traffic (eg. Sounds Virtual) 1062012 TCP port 17219 traffic (eg. Chipper) 1062014 TCP port 17235 traffic (eg. SSH Tectia Manager) 1062016 TCP port 17500 traffic (eg. Dropbox LanSync) 1062018 TCP port 17729 traffic (eg. Eclipse Aviation) 1062020 TCP port 17754 traffic (eg. Encap. ZigBee Packets) 1062022 TCP port 17755-17756 traffic (eg. ZigBee IP Transport / Transport Secure) 1062024 TCP port 17777 traffic (eg. SolarWinds Orion) 1062026 TCP port 18000 traffic (eg. Beckman Instruments) 1062028 TCP port 18181-18187 traffic (eg. OPSEC System) 1062030 TCP port 18186 traffic (eg. Occupational Health SC) 1062032 TCP port 18241 traffic (eg. Check Point RTM) 1062034 TCP port 18262 traffic (eg. GV NetConfig) 1062036 TCP port 18463 traffic (eg. AC Cluster) 1062038 TCP port 18634-18635 traffic (eg. Reliable Datagram) 1062040 TCP port 18769 traffic (eg. IQue) 1062042 TCP port 18881 traffic (eg. Infotos) 1062044 TCP port 18888 traffic (eg. APCNECMP) 1062046 TCP port 19000 traffic (eg. iGrid Server) 1062048 TCP port 19020 traffic (eg. J-Link TCP/IP) 1062050 TCP port 19191 traffic (eg. OPSEC System) 1062052 TCP port 19194 traffic (eg. UserAuthority SecureAgent) 1062054 TCP port 19283-19315 traffic (eg. Key Server for SASSAFRAS) 1062056 TCP port 19398 traffic (eg. mtrgtrans) 1062058 TCP port 19410 traffic (eg. HP products) 1062060 TCP port 19411 traffic (eg. HP products) 1062062 TCP port 19412 traffic (eg. HP products) 1062064 TCP port 19539 traffic (eg. FXUPTP) 1062066 TCP port 19540 traffic (eg. SXUPTP) 1062068 TCP port 19541 traffic (eg. JCP Client) 1062070 TCP port 19999 traffic (eg. Distributed Network - Secure) 1062072 TCP port 20000 traffic (eg. DNP) 1062074 TCP port 20001 traffic (eg. MicroSAN) 1062076 TCP port 20002-20003 traffic (eg. Commtact HTTP/HTTPS) 1062078 TCP port 20005 traffic (eg. OpenWebNet for electric network) 1062080 TCP port 20014 traffic (eg. OpenDeploy Listener) 1062082 TCP port 20034 traffic (eg. NetBurner ID Port) 1062084 TCP port 20046 traffic (eg. TMOP HL7 Message Transfer) 1062086 TCP port 20049 traffic (eg. Network File System (NFS) over RDMA) 1062088 TCP port 20167 traffic (eg. TOLfab Data Change) 1062090 TCP port 20202 traffic (eg. IPD Tunneling Port) 1062092 TCP port 20222 traffic (eg. iPulse-ICS) 1062094 TCP port 20480 traffic (eg. emWave) 1062096 TCP port 20670 traffic (eg. Track) 1062098 TCP port 20999 traffic (eg. At Hand MMP) 1062100 TCP port 21000 traffic (eg. IRTrans Control) 1062102 TCP port 21554 traffic (eg. MineScape Design File Server) 1062104 TCP port 21590 traffic (eg. VoFR Gateway) 1062106 TCP port 21800 traffic (eg. TVNC Pro Multiplexing) 1062108 TCP port 21845 traffic (eg. webphone) 1062110 TCP port 21846-21849 traffic (eg. NetSpeak) 1062112 TCP port 22000 traffic (eg. SNAPenetIO) 1062114 TCP port 22001-22005 traffic (eg. OptoControl) 1062116 TCP port 22125-22128 traffic (eg. dCache Access) 1062118 TCP port 22273 traffic (eg. wnn6) 1062120 TCP port 22305-22343 traffic (eg. CompactIS Tunnel / Secure Tunnel) 1062122 TCP port 22347 traffic (eg. WibuKey Standard WkLan) 1062124 TCP port 22350 traffic (eg. CodeMeter Standard) 1062126 TCP port 22555 traffic (eg. Vocaltec) 1062128 TCP port 22763 traffic (eg. Talika Main Server) 1062130 TCP port 22800 traffic (eg. Telerate Information Platform) 1062132 TCP port 22951 traffic (eg. Telerate Information Platform) 1062134 TCP port 23000-23005 traffic (eg. Inova LightLink Server) 1062136 TCP port 23333 traffic (eg. Emulex HBAnyware Remote Management) 1062138 TCP port 23400-23402 traffic (eg. Novar System) 1062140 TCP port 23456-23457 traffic (eg. Aequus) 1062142 TCP port 24000-24006 traffic (eg. med ltp/fsp-txrx/supp/ovw/ci/net svc) 1062144 TCP port 24242 traffic (eg. fileSphere) 1062146 TCP port 24249 traffic (eg. Vista 4GL) 1062148 TCP port 24321 traffic (eg. Isolv Local Directory) 1062150 TCP port 24386 traffic (eg. Intel RCI) 1062152 TCP port 24465 traffic (eg. Tonido Domain Server) 1062154 TCP port 24554 traffic (eg. BINKP Protocol) 1062156 TCP port 24676 traffic (eg. Canditv Message) 1062158 TCP port 24677 traffic (eg. FlashFiler) 1062160 TCP port 24678 traffic (eg. Turbopower Proactivate) 1062162 TCP port 24680 traffic (eg. TCC User HTTP) 1062164 TCP port 24754 traffic (eg. Citrix StorageLink Gateway) 1062166 TCP port 24922 traffic (eg. Find Identification of Network Devices) 1062168 TCP port 25000-25009 traffic (eg. icl-twobase1-10) 1062170 TCP port 25793 traffic (eg. Vocaltec) 1062172 TCP port 25900 traffic (eg. TASP Network Comm) 1062174 TCP port 25901 traffic (eg. NIObserver) 1062176 TCP port 25902 traffic (eg. NILinkAnalyst) 1062178 TCP port 25903 traffic (eg. NIProbe) 1062180 TCP port 26000 traffic (eg. quake) 1062182 TCP port 26133 traffic (eg. Symbolic Computation Software Composability) 1062184 TCP port 26208 traffic (eg. wnn6) 1062186 TCP port 26260-26261 traffic (eg. eZSystem) 1062188 TCP port 26262-26263 traffic (eg. K3 Software-Server/Client) 1062190 TCP port 26486-26489 traffic (eg. EXOnet) 1062192 TCP port 27000-27009 traffic (eg. FLEX LM (1-10)) 1062194 TCP port 27345 traffic (eg. ImagePump) 1062196 TCP port 27442 traffic (eg. Job controller) 1062198 TCP port 27504 traffic (eg. Kopek HTTP Head Port) 1062200 TCP port 27782 traffic (eg. ARS VISTA Application) 1062202 TCP port 27999 traffic (eg. TW Authentication/Key Distribution and) 1062204 TCP port 28000 traffic (eg. NX License Manager) 1062206 TCP port 28001 traffic (eg. PQ) 1062208 TCP port 28240 traffic (eg. Siemens GSM) 1062210 TCP port 29167 traffic (eg. ObTools Message) 1062212 TCP port 30001-30002 traffic (eg. Pagos) 1062214 TCP port 30260 traffic (eg. Kingdoms Online (CraigAvenue)) 1062216 TCP port 30999 traffic (eg. OpenView Desk Client) 1062218 TCP port 31020 traffic (eg. Autotrac ACP 245) 1062220 TCP port 31416 traffic (eg. XQoS network monitor) 1062222 TCP port 31457 traffic (eg. TetriNET Protocol) 1062224 TCP port 31620 traffic (eg. lm mon) 1062226 TCP port 31685 traffic (eg. DS Expert Monitor) 1062228 TCP port 31765 traffic (eg. GameSmith Port) 1062230 TCP port 31948-31949 traffic (eg. Embedded Device Configuration TX/RX) 1062232 TCP port 32034 traffic (eg. iRacing helper) 1062234 TCP port 32249 traffic (eg. T1 Distributed Processor) 1062236 TCP port 32483 traffic (eg. Access Point Manager Link) 1062238 TCP port 32635 traffic (eg. SecureNotebook-CLNT) 1062240 TCP port 32636 traffic (eg. DMExpress) 1062242 TCP port 32768-32777 traffic (eg. FileNet System) 1062244 TCP port 32775 traffic (eg. Performance Clearinghouse) 1062246 TCP port 32801 traffic (eg. Multiple Listing Network) 1062248 TCP port 32896 traffic (eg. Attachmate ID Manager) 1062250 TCP port 33123 traffic (eg. Aurora (Balaena Ltd)) 1062252 TCP port 33331 traffic (eg. DiamondCentral Interface) 1062254 TCP port 33434 traffic (eg. traceroute use) 1062256 TCP port 33656 traffic (eg. SNIP Slave) 1062258 TCP port 34249 traffic (eg. TurboNote) 1062260 TCP port 34378-34379 traffic (eg. P-Net on IP local /remote) 1062262 TCP port 34962-34964 traffic (eg. PROFInet System) 1062264 TCP port 34980 traffic (eg. EtherCAT Port) 1062266 TCP port 36001 traffic (eg. AllPeers Network) 1062268 TCP port 36865 traffic (eg. KastenX Pipe) 1062270 TCP port 37475 traffic (eg. science computings Venus Administration Port) 1062272 TCP port 37654 traffic (eg. Unisys ClearPath ePortal) 1062274 TCP port 38201 traffic (eg. Galaxy7 Data Tunnel) 1062276 TCP port 38202 traffic (eg. Fairview Message) 1062278 TCP port 38203 traffic (eg. AppGate Policy Server) 1062280 TCP port 39681 traffic (eg. TurboNote) 1062282 TCP port 40000 traffic (eg. SafetyNET p) 1062284 TCP port 40841-40843 traffic (eg. CSCP System) 1062286 TCP port 41111 traffic (eg. Foursticks QoS) 1062288 TCP port 41121 traffic (eg. Tentacle Server) 1062290 TCP port 41794-41795 traffic (eg. Crestron System) 1062292 TCP port 42508 traffic (eg. Computer Associates network discovery) 1062294 TCP port 42509-42510 traffic (eg. CA Threat Manager System) 1062296 TCP port 43188 traffic (eg. REACHOUT) 1062298 TCP port 43189 traffic (eg. NDM-AGENT-PORT) 1062300 TCP port 43190 traffic (eg. IP-PROVISION) 1062302 TCP port 43191 traffic (eg. Reconnoiter Agent Data Transport) 1062304 TCP port 43440-43441 traffic (eg. Cisco Network) 1062306 TCP port 44321-44322 traffic (eg. PCP) 1062308 TCP port 44553 traffic (eg. REALbasic) 1062310 TCP port 44818 traffic (eg. EtherNet/IP) 1062312 TCP port 45054 traffic (eg. InVision AG) 1062314 TCP port 45678 traffic (eg. EBA PRISE) 1062316 TCP port 45825 traffic (eg. Qpuncture Data Access) 1062318 TCP port 45966 traffic (eg. SSRServerMgr) 1062320 TCP port 46999 traffic (eg. MediaBox) 1062322 TCP port 47000 traffic (eg. Message Bus) 1062324 TCP port 47001 traffic (eg. Windows Remote Management) 1062326 TCP port 47557 traffic (eg. Databeam Corporation) 1062328 TCP port 47624 traffic (eg. Direct Play Server) 1062330 TCP port 47806 traffic (eg. ALC) 1062332 TCP port 47808 traffic (eg. Building Automation and Control Networks) 1062334 TCP port 48000-48003 traffic (eg. Nimbus System) 1062336 TCP port 48049 traffic (eg. 3GPP Cell Broadcast) 1062338 TCP port 48128 traffic (eg. Image Systems Networks) 1062340 TCP port 48129 traffic (eg. Bloomberg locator) 1062342 TCP port 48556 traffic (eg. com-bardac-dw) 1062344 TCP port 48619 traffic (eg. iqobject) 1132610 WEB-CLIENT Javascript Obfuscation in Exploit Kits - 62 (Ransomware Attack Vector) 1133422 WEB-CLIENT Javascript Obfuscation in Exploit Kits - 85 (Ransomware Attack Vector) Deleted 6 rule(s): --------------- 1055107 SHELLCODE Egg Hunter -1 (old rule) 1056078 WEB Hashtable Collisions (old rule) 1057216 WEB MicrosoftSharePoint Directory Traversal Vulnerability -3 (CVE-2013-0084) (old rule) 1110895 WEB-CLIENT WScript.Shell Remote Code Execution -1 (Ransomware Attack Vector) (old rule) 1131155 WEB-CLIENT WScript.Shell Remote Code Execution -3 (old rule) 1133960 DNS ISC BIND Query Response Missing RRSIG Denial of Service -1 (CVE-2016-9444) (old rule)