IPS Security Update - October 30th, 2017

[Danny]

October 30th, 2017

Package No. 635177262 & 634177262

New IPS Protections

				R7x Profile	R80 Profiles
Severity			Protection Name	Recommended	Basic	Optimized	Strict
			Microsoft Windows Remote Desktop Protocol Scanning Attempt
			Apache Subversion svn-ssh URL Command Execution (CVE-2017-9800)
			HPE Intelligent Management Center dbman Stack Buffer Overflow (CVE-2017-8956)
			Microsoft Edge DoLoopBodyStart Out of Bounds Read (CVE-2017-11811)
			Apache Tomcat HTTP PUT Remote Code Execution (CVE-2017-12617)
			Cisco License Manager Server ReportCSV Directory Traversal (CVE-2017-12263)
			Digium Asterisk RTP Stack Information Disclosure (CVE-2017-14099)
			Elastic Elasticsearch ThrowableObjectInputStream Insecure Deserialization (CVE-2015-5377)
			OpenVPN read_key Stack Based Buffer Overflow (CVE-2017-12166)

Updated Protections

	R7x Profile	R80 Profiles
Protection Name	Recommended	Basic	Optimized	Strict
Adobe Acrobat and Reader Buffer Overflow - ver 2 (APSB13-22; CVE-2013-3351)
Adobe Acrobat and Reader Information Disclosure (APSB17-24; CVE-2017-3115)
Adobe Acrobat and Reader Memory Corruption (APSB17-24; CVE-2017-11263)
Apache Tomcat PUT Method Arbitrary File Upload Remote Code Execution (CVE-2017-12615; CVE-2017-12617)
ISC DHCP Server Denial of Service And Buffer Overflow (CVE-2004-0460; CVE-2006-3122; CVE-2010-2156)
Microsoft Edge Memory Corruption (CVE-2017-8734)
Microsoft Windows ATMFD Font Driver Information Disclosure (MS15-021; CVE-2015-0089; CVE-2015-1670)
Microsoft Windows PDF Library Remote Code Execution (CVE-2017-8728)
Microsoft Word RTF Object Parsing Memory Corruption (MS08-072; CVE-2008-4030)
Novell NetIQ Privileged User Manager Eval Policy Bypass
Novell QuickFinder Server Multiple Cross Site Scripting (CVE-2009-0611)
Novell ZENworks Configuration Management UploadServlet Remote Code Execution
SolarWinds Orion IPAM Reflected Cross-site Scripting (CVE-2012-4939)
Suspicious Hyperlink Mail Phishing Attempt
Suspicious Site Containing Tech Scams

Threat wiki

App wiki

IPS Advisories

Copyright © Check Point Software Technologies LTD.