Rule Update

17-026 (June 6, 2017)


* indicates a new version of an existing rule

Deep Packet Inspection Rules:

DCERPC Services
1008422 - Detected SMBv1 Request

DCERPC Services - Client
1008423 - Detected SMBv1 Response

Database MySQL
1008330 - MySQL Denial Of Service Vulnerability (CVE-2017-3599)

HP Intelligent Management Center (IMC)
1008329 - HP Intelligent Management Center RedirectServlet 'parafile' Directory Traversal Vulnerability

1008270 - OpenSSL ChaCha20/Poly1305 Cipher Suite Heap Buffer Overflow Vulnerability (CVE-2016-7054)

Unix Samba
1008420* - Samba Shared Library Remote Code Execution Vulnerability (CVE-2017-7494)

Web Application Common
1008318* - CPanel Cgiemail And Cgiecho Format String Vulnerability (CVE-2017-5613)

Web Application PHP Based
1008411 - WordPress Tracking Code Manager Plugin Denial Of Service Vulnerability

Web Proxy Squid
1008111 - Squid HTTP Response Denial Of Service Vulnerability

Web Server Common
1008397 - Identified Directory Traversal Attack In HTTP Request Headers

Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.

Log Inspection Rules:

1008390 - FTP Server - CompleteFTP