Ruleset Update Summary - 2024/11/26 - v10752

Ruleset Updates
1

Summary:

0 new OPEN, 0 new PRO (0 + 0)

Modified inactive rules:

  • 2002131 - ET WEB_SERVER Oracle Reports XML Information Disclosure (web_server.rules)
  • 2002132 - ET WEB_SERVER Oracle Reports DESFORMAT Information Disclosure (web_server.rules)
  • 2008887 - ET ACTIVEX Microsoft XML Core Services DTD Cross Domain Information Disclosure clsid (activex.rules)
  • 2011695 - ET WEB_CLIENT Possible Microsoft Internet Explorer Dynamic Object Tag/URLMON Sniffing Cross Domain Information Disclosure Attempt (web_client.rules)
  • 2011764 - ET WEB_CLIENT Possible Microsoft Internet Explorer mshtml.dll Timer ID Memory Pointer Information Disclosure Attempt (web_client.rules)
  • 2012866 - ET EXPLOIT RXS-3211 IP Camera Password Information Disclosure Attempt (exploit.rules)
  • 2013321 - ET WEB_CLIENT Internet Explorer toStaticHTML HTML Sanitizing Information Disclosure Attempt (web_client.rules)
  • 2019732 - ET WEB_CLIENT Possible Internet Explorer VBscript failure to handle error case information disclosure CVE-2014-6332 Percent Hex Encode (web_client.rules)
  • 2053706 - ET EXPLOIT [TW] EXPLOIT Possible MMC Remote Command Execution (exploit.rules)
  • 2800058 - ETPRO TELNET Microsoft Telnet Client Information Disclosure (telnet.rules)
  • 2802109 - ETPRO EXPLOIT CA Total Defense Suite UNCWS getDBConfigSettings Credential Information Disclosure (exploit.rules)
  • 2803376 - ETPRO WEB_SERVER Microsoft .NET Framework ChartControl Information Disclosure Attempt (web_server.rules)
  • 2804521 - ETPRO WEB_CLIENT Microsoft Internet Explorer 9 Null Byte Information Disclosure (web_client.rules)
  • 2804652 - ETPRO WEB_SPECIFIC_APPS Path Traversal on Polycom Web Management Interface (web_specific_apps.rules)
  • 2806983 - ETPRO WEB_CLIENT Possible FrontPage information disclosure via XML (CVE-2013-3137) (web_client.rules)
  • 2807213 - ETPRO WEB_CLIENT Possible Internet Explorer Information Disclosure Attempt (CVE-2013-3908) (web_client.rules)
  • 2809154 - ETPRO WEB_CLIENT Possible Internet Explorer Cross-domain Information Disclosure CVE-2014-6340 (web_client.rules)
  • 2809157 - ETPRO WEB_CLIENT Possible Internet Explorer JavaScript parsing error Information Disclosure CVE-2014-6345 (web_client.rules)
  • 2809224 - ETPRO WEB_SPECIFIC_APPS Paid Memberships Pro 1.7.14.2 Path Traversal Attempt (web_specific_apps.rules)
  • 2810963 - ETPRO WEB_CLIENT Possible Internet Explorer Information Disclosure (CVE-2015-1692) (web_client.rules)
  • 2819685 - ETPRO WEB_CLIENT Intenet Explorer Information Disclosure Vulnerability (CVE-2016-0156) (web_client.rules)
  • 2823152 - ETPRO EXPLOIT Possible Browser.sys Information Disclosure Exe Inbound (CVE-2016-7218) (exploit.rules)
  • 2825375 - ETPRO WEB_CLIENT Possible Internet Explorer Information Disclosure Vulnerability (CVE-2017-0008) (web_client.rules)
  • 2825377 - ETPRO WEB_CLIENT Microsoft Edge OOB Read Information Disclosure (CVE-2017-0011) (web_client.rules)
  • 2825378 - ETPRO WEB_CLIENT Possible Microsoft Internet Explorer Information Disclosure (CVE-2017-0022) (web_client.rules)
  • 2825391 - ETPRO EXPLOIT Possible Scripting Engine Information Disclosure Vulnerability (CVE-2017-0049) (exploit.rules)
  • 2825400 - ETPRO WEB_CLIENT Microsoft Browser Information Disclosure Vulnerability (CVE-2017-0009) (web_client.rules)
  • 2825402 - ETPRO WEB_CLIENT Microsoft Edge Information Disclosure Vulnerability (CVE-2017-0017) (web_client.rules)
  • 2825406 - ETPRO WEB_CLIENT Internet Explorer Information Disclosure Vulnerability (CVE-2017-0059) (web_client.rules)
  • 2825407 - ETPRO EXPLOIT Windows GDI Information Disclosure vulnerability (CVE-2017-0060) (exploit.rules)
  • 2825408 - ETPRO EXPLOIT GDI+ Information Disclosure Vulnerability (CVE-2017-0062) (exploit.rules)
  • 2825415 - ETPRO WEB_CLIENT Windows GDI+ Information Disclosure Vulnerability (CVE-2017-0073) (web_client.rules)
  • 2825427 - ETPRO WEB_CLIENT Internet Explorer Information Disclosure Vulnerability (CVE-2017-0094) (web_client.rules)
  • 2825431 - ETPRO EXPLOIT Windows Uniscribe Information Disclosure Vulnerability (CVE-2017-0121) (exploit.rules)
  • 2825850 - ETPRO EXPLOIT Windows Kernel Information Disclosure Vulnerability Inbound (CVE-2017-0167) (exploit.rules)
  • 2825857 - ETPRO WEB_CLIENT Possible Windows Scripting Engine Information Disclosure Vulnerability (CVE-2017-0208) (web_client.rules)
  • 2825863 - ETPRO WEB_CLIENT Possible Adobe Reader Information Disclosure CVE-2017-3022 (web_client.rules)
  • 2825874 - ETPRO WEB_CLIENT Possible Adobe Reader Information Disclosure CVE-2017-3044 (web_client.rules)
  • 2826337 - ETPRO EXPLOIT Windows Kernel Information Disclosure Vulnerability (CVE-2017-0259) (exploit.rules)