> RealSecure� Network Sensor XPU 20.8 and XPU 5.7 are now available from the ISS >Download Center: <http://www.iss.net/download/>. > > PROTECTION BENEFITS > > Included in this release are fourteen new events including protocol anomaly >detections and signatures. > > * Application Protection. This release contains events to address issues in >Microsoft IIS, Gnutella Bearshare, Gnutella Limewire and Polycom ViaVideo. > > * Platform Protection. Protection for issues in Solaris and Windows is >included. > > > NEW EVENTS > > SecChkID ProductCheckName Event Type > Risk Level > ------- ---------------- --------- > ---------- > 7284 Telnet_Solaris_Forced_Login Unauthorized Access Attempt High > 9600 HTTP_GET_CreateTable Unauthorized Access Attempt High > 9601* HTTP_POST_CreateTable Unauthorized Access Attempt High > 9602 HTTP_GET_GroupBy Unauthorized Access Attempt High > 9603* HTTP_POST_GroupBy Unauthorized Access Attempt High > 9604 HTTP_GET_ComputeSum Unauthorized Access Attempt High > 9605* HTTP_POST_ComputeSum Unauthorized Access Attempt High > 10568 HTTP_JRun_IIS_Overflow Unauthorized Access Attempt High > 10659 HTTP_MDAC_RDS_Overflow Unauthorized Access Attempt High > 9448 SMTP_Virus_Recipient Suspicious Activity High > 10626 Gnutella_BearShare Suspicious Activity Low > 10781 Gnutella_LimeWire Suspicious Activity Low > 9447* Email_Virus_Double_Extension Suspicious Activity Medium > 10370 HTTP_IIS_Host_DoS Protocol Signature Medium > > *These events are contained in the 7.0 Network Sensor only. > > SECURITY CONTENT BUG FIXES > > Several existing events are improved in this release for Network Sensor 7.0. > > * DNS_Null_Query (2354) > * HTTP_Unix_Passwords (1069) > * Multiple SNMP Events > * Loki (1452) > > VERSIONS/PLATFORMS > > XPU 20.8 supports Network Sensor 7.0 on Windows 2000 and RH Linux 7.3. XPU 5.7 >supports Network Sensor 6.5 on Solaris, Windows NT, Windows 2000 and the Nokia >appliance platforms. Supported management consoles include Workgroup Managers 6.6, >6.5, and SiteProtector 1.2. > > > For more information on this release, please contact the following: > > * For additional product information: > - X-Press Updates, <http://www.iss.net/db_data/xpu/RS.php> > - Network Sensor, ><http://www.iss.net/products_services/enterprise_protection/rsnetwork/sensor.php> > > * For sales and professional services information: > - [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> > - 888-776-2362 (U.S. and Canada); +1-404-236-2600 (International) > > * For support information, including ISS> '> Technical Support Knowledgebase: > - Customer Support - <http://www.iss.net/support/enterprise/index.php> > - Technical Support Knowledgebase - <http://www.iss.net/support/knowledgebase/> > > _______________________________________________ ISSForum mailing list [EMAIL PROTECTED]
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo
