Actualización Fortiguard 4.500 – 4.513

Hacia bastante que no tenia tiempo de actualizar las firmas del IPS, así que hoy toca subir de la 4.500 a la 4.513. Un montón de firmas nuevas.

WebPageTest.Arbitrary.PHP.File.Upload
TrendMicro.OfficeScan.CGI.Buffer.Overflow
PHP.DateInterval.Heap.Buffer.Overread.DoS
Oracle.Database.TNS.Listener.Service.Authentication.Bypass
MS.GDIPlus.JPEG.Buffer.Overflow
MS.Excel.DataFormat.Remote.Code.Execution
D.Link.Wireless.Router.CAPTCHA.Data.Processing.Buffer.Overflow
CA.TotalDefenseSuite.UNCWS.Multiple.SP.SQL.Injection
Adobe.Reader.JpxDecode.Jp2c.Stream.Memory.Corruption
Adobe.Flash.Player.Shared.Object.Use.After.Free
3Com.OfficeConnect.ADSL.Wireless.Firewall.Router.DoS
WordPress.Tinymce.Thumnail.Gallery.Plugin.File.Disclosure
OpenSSL.TLS.Heartbeat.Information.Disclosure
Microsoft.Windows.iSCSI.Target.DoS
GnuTLS.gnutls_handshake.Information.Disclosure
Cisco.IOS.HTTP.Command.Execution
OpenSSL.ChangeCipherSpec.Injection
MS.Lync.Meeting.URL.XSS
MS.IE.UL.Object.Memory.Corruption
MS.IE.textrange.Use.After.Free
MS.IE.Table.Element.Use.After.Free
MS.IE.isindex.Memory.Corruption
MS.IE.Invalid.Range.Handling.Memory.Corruption
MS.IE.Invalid.Range.Handling.Memory.Corruption
MS.IE.DOM.Mutation.Memory.Corruption
MS.IE.CTreeNode.Remote.Memory.Corruption
MS.IE.CTreeNode.Cast.Type.Memory.Corruption
MS.IE.CElement.Handling.Code.Execution
MS.IE.CDOMTestNode.Handling.Code.Execution
MS.IE.CDispNode.Handling.Code.Execution
MS.IE.CDATA.Use.After.Free
Siemens.Gigaset.SE361.WLAN.Data.Flood.DoS
Oracle.MySQL.Server.XPath.DoS
Oracle.Java.System.arraycopy.Race.Condition
OpenSSL.DTLS.Recursion.DoS
MS.IE.CDomRange.Remote.Code.Execution
HP.Data.Protector.CRS.Opcode.305.Stack.Buffer.Overflow
HP.Data.Protector.CRS.Opcode.264.Stack.Buffer.Overflow
HP.Data.Protector.CRS.Opcode.260.Stack.Buffer.Overflow
HP.Data.Protector.CRS.Opcode.259.Stack.Buffer.Overflow
HP.Data.Protector.CRS.Opcode.235.Stack.Buffer.Overflow
HP.Data.Protector.CRS.Opcode.234.Stack.Buffer.Overflow
HP.Data.Protector.CRS.Opcode.227.Stack.Buffer.Overflow
HP.Data.Protector.CRS.Opcode.215.And.263.Stack.Buffer.Overflow
HP.Data.Protector.CRS.Opcode.211.Stack.Buffer.Overflow
HP.Data.Protector.CRS.Opcode.1092.Stack.Buffer.Overflow
HP.Data.Protector.CRS.Opcode.1091.Stack.Buffer.Overflow
Yokogawa.CS3000.BKESimmgr.EXE.Buffer.Overflow
OpenSSL.DTLS.Fragment.Buffer.Overflow
HP.LaserJet.Webadmin.Password.Reset
Cogent.DataHub.Web.Server.GetPermissions.asp.Command.Injection
Apexis.Camera.Directory.Traversal
AlienVault.OSSIM.SQL.Injection
Advantech.WebAccess.SCADA.webvact.ocx.AccessCode2.Bof
Advantech.WebAccess.SCADA.Webvact.Buffer.Overflow
Adobe.Flash.player.Security.Bypass
dobe.Reader.Acrobat.Privilege.API.Calls.Information.Disclosure

De momento sin falsos positivos… todas puestas y funcionando.