IPS Signature Database Update

Name ips.sig
Version 2.1.203
StoneOS StoneOS 5.0R4F3.1 or above
Release Date 2017-08-25
New Signature
(15)
Attack ID Description Detail
320384 EXPLOIT Suspicious Exploit Data Detection - 1142471 click for more information
320385 EXPLOIT Suspicious Exploit Data Detection - 1142470 click for more information
320386 EXPLOIT Suspicious Exploit Data Detection - 1142469 click for more information
320387 EXPLOIT Suspicious Exploit Data Detection - 1142468 click for more information
320388 EXPLOIT Suspicious Exploit Data Detection - 1142467 click for more information
320389 EXPLOIT Suspicious Exploit Data Detection - 1142466 click for more information
320390 WEB-CLIENT Microsoft Windows Performance Monitor XXE Injection Information Disclosure (CVE-2017-0170) click for more information
711218 RDP Microsoft Windows XP and Server 2003 RDP CVE-2017-0176 Heap Buffer Overflow -2 (CVE-2017-0176) click for more information
711219 RDP Microsoft Windows XP and Server 2003 RDP CVE-2017-0176 Heap Buffer Overflow -1 (CVE-2017-0176) click for more information
320378 WEB Apache Struts Dynamic Method Invocation Remote Code Execution -3 (CVE-2017-9791) click for more information
320379 RDP Microsoft Windows XP and Server 2003 RDP CVE-2017-0176 Heap Buffer Overflow -2 (CVE-2017-0176) click for more information
320380 RDP Microsoft Windows XP and Server 2003 RDP CVE-2017-0176 Heap Buffer Overflow -1 (CVE-2017-0176) click for more information
320381 EXPLOIT Suspicious Exploit Data Detection - 1142474 click for more information
320382 EXPLOIT Suspicious Exploit Data Detection - 1142473 click for more information
320383 EXPLOIT Suspicious Exploit Data Detection - 1142472 click for more information
Updated Signature
(5)
Attack ID Description Detail
306393 WEB SQL injection attempt -38 Click here for more information
706106 WEB-CLIENT WScript.Shell Remote Code Execution -1 (Ransomware Attack Vector) (CVE-2006-4704) Click here for more information
317732 WEB IPFire ids.cgi OINKCODE Parameter Command Injection -2 (CVE-2017-9757) Click here for more information
309685 WEB-CLIENT WScript.Shell Remote Code Execution -1 (Ransomware Attack Vector) (CVE-2006-4704) Click here for more information
711215 WEB IPFire ids.cgi OINKCODE Parameter Command Injection -2 (CVE-2017-9757) Click here for more information