By Sean Martin, Security Solutions Architect
Cisco has released IPS signature update S496. This update contains 4 new signatures:
· IBM Access Support ActiveX Control Buffer Overflow Vulnerability
· Oracle WebLogic Server searchQuery Remote Cross-Site Scripting Vulnerability
· Microsoft Internet Explorer HTML Objects Memory Corruption Vulnerability
· FTP Service and Berkeley rsh and rlogin Utilities Unauthorized Access Issue
Of these, the first three are ranked high severity and only the first has a CVSS rating above 7.0.
The update also includes updates to 13 existing signatures for vulnerabilities in various Microsoft Office and Adobe products. The update retires 4 existing signatures.
See complete list
here.
If you are a Managed Security-IPS client, Simpler-Webb will perform all updates to protect against these vulnerabilities. If you'd like more information on how IPS signature updates work or about Managed Security, please contact us at
info@swinc.com or call (800) 808-3083.
