Update Details

Update #2386 (06/11/2014)

4 new signatures:

MEDIUM	WORM:CRYPTOLOCKER-RACKETEER	WORM: Cryptolocker 2.0 Racketeer Ransomware Download
HIGH	HTTP:MISC:HP-RELEASE-CONTROL	HTTP: HP Release Control Authenticated Privilege Escalation
HIGH	HTTP:MISC:COGENT-SERVER-CMD-INJ	HTTP: Cogent DataHub Web Server GetPermissions.asp Command Injection
HIGH	SSL:OPENSSL-MITM-SEC-BYPASS	SSL: OpenSSL ChangeCipherSpec MITM Security Bypass

4 updated signatures:

HIGH	HTTP:STC:ADOBE:READER-UAF	HTTP: Adobe PDF Reader CVE-2014-0527 Use-After-Free
HIGH	HTTP:STC:MOZILLA:NSCSSVALUE-OF	HTTP: Mozilla Products nsCSSValue Array Index Integer Overflow
CRITICAL	APP:IPMI-CIPHER-ZERO	APP: IPMI Cipher Zero Authentication Bypass And Arbitrary Command Execution
HIGH	HTTP:STC:JAVA:ATOMIC-SB-BREACH	HTTP: Oracle Java AtomicReferenceArray Sandbox Breach

Details of the signatures included within this bulletin:

HTTP:STC:JAVA:ATOMIC-SB-BREACH - HTTP: Oracle Java AtomicReferenceArray Sandbox Breach

Severity: HIGH

Description:

This signature detects attempts to exploit a known flaw in Oracle Java. An unauthorized remote attacker can exploit this vulnerability by enticing the target user to open a malicious Java application or applet. Successful exploitation could breach the JRE sandbox and result in execution of arbitrary code the target system.

Supported On:

idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, idp-4.2.0, idp-5.0.0, mx-9.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, srx-9.2, srx-branch-9.4, j-series-9.5, idp-4.2.110100823, srx-10.0, srx-branch-10.0, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, srx-11.4, srx-branch-11.4, idp-4.1.110110719, mx-11.4, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, isg-3.5.140347, idp-5.1.110131122, isg-3.5.140407, idp-5.1.110140207, vsrx-12.1

References:

cve: CVE-2012-0507
bugtraq: 52161

Affected Products:

Ubuntu Ubuntu Linux 11.04 amd64
Ubuntu Ubuntu Linux 11.04 ARM
Ubuntu Ubuntu Linux 11.04 i386
Ubuntu Ubuntu Linux 11.04 powerpc
Red Hat Enterprise Linux Desktop 6
Red Hat Enterprise Linux Desktop Optional 6
Red Hat Enterprise Linux HPC Node 6
Red Hat Enterprise Linux HPC Node Optional 6
Red Hat Enterprise Linux Server 6
Red Hat Enterprise Linux Server Optional 6
Red Hat Enterprise Linux Workstation 6
Red Hat Enterprise Linux Workstation Optional 6
Red Hat Enterprise Linux Desktop Supplementary 6
Apple Mac Os X 10.6.5
Red Hat Enterprise Linux HPC Node Supplementary 6
Apple Mac OS X Server 10.6.5
Red Hat Enterprise Linux Server Supplementary 6
Red Hat Enterprise Linux Workstation Supplementary 6
Sun JRE (Linux Production Release) 1.5.0_29
Sun JRE (Linux Production Release) 1.6.0_25
Sun JRE (Windows Production Release) 1.6.0_22
Sun JRE (Windows Production Release) 1.5.0_26
Sun JRE (Windows Production Release) 1.5.0_29
SuSE SUSE Linux Enterprise Desktop 10 SP4
SuSE SUSE Linux Enterprise Server 10 SP4
Apple Mac OS X Server 10.6.3
Apple Mac Os X 10.7.3
Apple Mac Os X Server 10.7.3
SuSE SUSE Linux Enterprise SDK 11 SP2
SuSE SUSE Linux Enterprise Server 11 SP2
Sun JDK (Linux Production Release) 1.5.0_29
Sun JDK (Linux Production Release) 1.5.0_28
Sun JDK (Linux Production Release) 1.6.0_24
Sun JDK (Solaris Production Release) 1.5.0_28
Sun JDK (Solaris Production Release) 1.6.0_24
Sun JDK (Windows Production Release) 1.5.0_28
Sun JDK (Windows Production Release) 1.6.0_24
Sun JRE (Linux Production Release) 1.5.0_28
Sun JRE (Linux Production Release) 1.6.0_24
Sun JRE (Solaris Production Release) 1.5.0_28
Sun JRE (Solaris Production Release) 1.6.0_24
Sun JRE (Windows Production Release) 1.5.0_28
Sun JRE (Windows Production Release) 1.6.0_24
Apple Mac Os X 10.6.8
Apple Mac Os X Server 10.6.8
Apple Mac OS X 10.6.2
Apple Mac OS X Server 10.6.2
Apple Mac OS X 10.6.5
Apple Mac OS X Server 10.6.5
IBM Java SE 5.0.0 SR12
IBM Java SE 5.0.0 SR12
IBM Java SE 6.0.0 SR9
Sun JDK (Windows Production Release) 1.5.0 .0 04
Sun JRE (Linux Production Release) 1.6.0 07
Sun JDK (Linux Production Release) 1.6.0 07
Sun JRE (Linux Production Release) 1.5.0 16
Sun JDK (Linux Production Release) 1.6.0 05
Sun JRE (Linux Production Release) 1.6.0 05
Sun JDK (Linux Production Release) 1.5.0 15
Sun JDK (Solaris Production Release) 1.5.0 0 03
Sun JDK (Linux Production Release) 1.6.0 06
Sun JDK (Solaris Production Release) 1.5.0 15
Sun JRE (Solaris Production Release) 1.5.0 15
Sun JRE (Linux Production Release) 1.6.0 06
Sun JDK (Linux Production Release) 1.5.0 14
Debian Linux 6.0 ia-32
Debian Linux 6.0 amd64
Debian Linux 6.0 arm
Debian Linux 6.0 powerpc
Debian Linux 6.0 sparc
Debian Linux 6.0 ia-64
Debian Linux 6.0 mips
Sun JDK (Solaris Production Release) 1.5.0 0 09
Sun JDK (Linux Production Release) 1.6.0_23
Sun JDK (Solaris Production Release) 1.6.0_23
Sun JDK (Windows Production Release) 1.6.0_23
Sun JRE (Linux Production Release) 1.6.0_23
Sun JRE (Solaris Production Release) 1.6.0_23
Sun JRE (Windows Production Release) 1.6.0_23
Sun JRE (Linux Production Release) 1.6.0 01
Sun JDK (Linux Production Release) 1.5.0_33
Sun JDK (Linux Production Release) 1.6.0_30
Sun JDK (Solaris Production Release) 1.5.0_33
Sun JDK (Windows Production Release) 1.5.0_33
Sun JDK (Windows Production Release) 1.7.0_2
Sun JDK (Linux Production Release) 1.7.0_2
Sun JDK (Windows Production Release) 1.6.0_30
Sun JDK (Solaris Production Release) 1.6.0_30
Sun JDK (Solaris Production Release) 1.7.0_2
Sun JRE (Linux Production Release) 1.6.0_30
Sun JRE (Windows Production Release) 1.5.0_33
Sun JRE (Windows Production Release) 1.7.0_2
Sun JRE (Solaris Production Release) 1.7.0_2
Sun JRE (Solaris Production Release) 1.5.0_33
Sun JRE (Windows Production Release) 1.6.0_30
Sun JRE (Linux Production Release) 1.5.0_33
Sun JRE (Linux Production Release) 1.7.0_2
Sun JRE (Solaris Production Release) 1.6.0_30
Sun JDK (Windows Production Release) 1.6.0 20
Sun JDK (Solaris Production Release) 1.6.0 20
Sun JDK (Linux Production Release) 1.6.0 20
Sun JRE (Linux Production Release) 1.6.0 14
Sun JRE (Windows Production Release) 1.6.0 14
Sun JRE (Solaris Production Release) 1.6.0 14
IBM Java SE 5.0 SR11 PF1
IBM Java SE 7.0
IBM Java SE 5.0 SR13
Mandriva Linux Mandrake 2011
Mandriva Linux Mandrake 2011 x86_64
Apple Mac Os X 10.7
IBM Java SE 6 SR8 FP1
Sun JRE (Solaris Production Release) 1.5.0.0 09
Sun JDK (Linux Production Release) 1.5.0 16
Sun JDK (Solaris Production Release) 1.5.0 16
Sun JDK (Windows Production Release) 1.5.0 16
Sun JRE (Linux Production Release) 1.5.0 07
Sun JDK (Linux Production Release) 1.7.0
Sun JDK (Linux Production Release) 1.5.0 01
Sun JDK (Linux Production Release) 1.5.0 02
Red Hat Enterprise Linux WS Extras 4
Red Hat Enterprise Linux ES Extras 4
Red Hat Enterprise Linux AS Extras 4
Red Hat Desktop Extras 4
Sun JDK (Linux Production Release) 1.5.0 Update13
Sun JDK (Linux Production Release) 1.5.0 Update14
Sun JDK (Linux Production Release) 1.5.0 Update15
Sun JDK (Linux Production Release) 1.5.0 Update16
Sun JDK (Linux Production Release) 1.5.0 Update17
Sun JDK (Linux Production Release) 1.5.0 Update18
Sun JDK (Linux Production Release) 1.5.0 Update19
Sun JDK (Linux Production Release) 1.5.0 Update20
Sun JDK (Linux Production Release) 1.5.0 Update21
Sun JDK (Linux Production Release) 1.5.0 Update22
Sun JDK (Linux Production Release) 1.5.0 Update23
Sun JDK (Linux Production Release) 1.5.0 Update24
Sun JDK (Linux Production Release) 1.5.0 Update25
Sun JDK (Linux Production Release) 1.6.0 Update 10
Sun JDK (Linux Production Release) 1.6.0 Update 11
Sun JDK (Linux Production Release) 1.6.0 Update 12
Sun JDK (Linux Production Release) 1.6.0 Update 13
Sun JDK (Linux Production Release) 1.6.0 Update 14
Sun JDK (Linux Production Release) 1.6.0 Update 15
Sun JDK (Linux Production Release) 1.6.0 Update 16
Sun JDK (Linux Production Release) 1.6.0 Update 17
Sun JDK (Linux Production Release) 1.6.0 Update 18
Sun JDK (Linux Production Release) 1.6.0 Update 19
Sun JDK (Linux Production Release) 1.6.0 Update 20
Sun JDK (Linux Production Release) 1.6.0 Update 21
Sun JDK (Linux Production Release) 1.6.0 Update 3
Sun JDK (Linux Production Release) 1.6.0 Update 4
Sun JDK (Linux Production Release) 1.6.0 Update 5
Sun JDK (Linux Production Release) 1.6.0 Update 6
Sun JDK (Linux Production Release) 1.6.0 Update 7
Sun JRE (Linux Production Release) 1.5.0 15
Apple Mac OS X 10.6
Apple Mac OS X Server 10.6
Oracle Enterprise Linux 5
Oracle Enterprise Linux 6
Sun JDK (Windows Production Release) 1.6.0 18
Sun JDK (Solaris Production Release) 1.6.0 18
Sun JDK (Linux Production Release) 1.6.0 18
Sun JRE (Linux Production Release) 1.6.0 18
Sun JRE (Windows Production Release) 1.6.0 18
Sun JDK (Windows Production Release) 1.5.0 23
Sun JRE (Solaris Production Release) 1.6.0 18
Sun JDK (Linux Production Release) 1.5.0 23
Sun JDK (Solaris Production Release) 1.5.0 23
Sun JRE (Windows Production Release) 1.5.0 23
Sun JRE (Linux Production Release) 1.5.0 23
Sun JRE (Solaris Production Release) 1.5.0 23
IBM JAVA IBM 31-bit SDK for z/OS 6.0
Sun JDK (Windows Production Release) 1.5.0 .0 05
Apple Mac OS X 10.6.3
Sun JDK (Linux Production Release) 1.5.0 .0 05
Sun JDK (Solaris Production Release) 1.5.0 .0 05
Sun JRE (Linux Production Release) 1.6.0 19
Sun JRE (Windows Production Release) 1.6.0 19
Sun JRE (Solaris Production Release) 1.6.0 19
Sun JDK (Solaris Production Release) 1.6.0 19
Sun JDK (Windows Production Release) 1.6.0 19
Sun JDK (Linux Production Release) 1.6.0 19
Sun JDK (Linux Production Release) 1.5.0 24
Sun JDK (Windows Production Release) 1.5.0 24
Sun JDK (Solaris Production Release) 1.5.0 24
Apple Mac Os X 10.6.6
Apple Mac OS X Server 10.6.6
Sun JRE (Linux Production Release) 1.6.0 12
Sun JRE (Linux Production Release) 1.6.0
Sun JRE (Linux Production Release) 1.6.0 10
Apple Mac OS X Server 10.6.1
Apple Mac OS X 10.6.1
Sun JDK (Solaris Production Release) 1.6.0 01
Sun JRE (Linux Production Release) 1.5.0 09
HP HP-UX B.11.23
Sun JDK (Windows Production Release) 1.6.0 01
Sun JDK (Solaris Production Release) 1.5.0 07-B03
Sun JDK (Solaris Production Release) 1.5.0 11-B03
Sun JDK (Solaris Production Release) 1.6.0 01-B06
Oracle Enterprise Linux 6.2
Sun JRE (Linux Production Release) 1.6.0 11
Sun JRE (Solaris Production Release) 1.6.0 11
Sun JRE (Windows Production Release) 1.6.0 11
Sun JRE (Solaris Production Release) 1.5.0
Sun JRE (Linux Production Release) 1.5.0
Sun JRE (Windows Production Release) 1.5.0
Sun JRE (Windows Production Release) 1.5.0 06
Sun JRE (Solaris Production Release) 1.5.0 06
Sun JRE (Linux Production Release) 1.5.0 06
Sun JRE (Linux Production Release) 1.5.0 03
Sun JRE (Linux Production Release) 1.5.0 04
Sun JDK (Linux Production Release) 1.6.0 10
Sun JDK (Linux Production Release) 1.6.0 11
IBM JAVA IBM 64-bit SDK for z/OS 6.0
Sun JDK (Linux Production Release) 1.5.0 17
Hitachi uCosminexus Operator
Hitachi uCosminexus Client
Hitachi Processing Kit for XML
SuSE SUSE Linux Enterprise Java 10 SP4
SuSE SUSE Linux Enterprise Java 11 SP1
IBM Java SE 6 SR10
Sun JDK (Windows Production Release) 1.5.0 14
Red Hat Enterprise Linux Supplementary 5 Server
Ubuntu Ubuntu Linux 10.10 amd64
IBM Java SE 5.0
IBM Java SE 6.0
Sun JDK (Linux Production Release) 1.5.0
Sun JDK (Linux Production Release) 1.5.0 07
Sun JRE (Linux Production Release) 1.5.0 01
Sun JRE (Linux Production Release) 1.5.0 02
Sun JRE (Linux Production Release) 1.5.0 05
Ubuntu Ubuntu Linux 10.10 powerpc
Ubuntu Ubuntu Linux 10.10 i386
HP HP-UX B.11.11
Apple Mac Os X 10.7.2
Sun JRE (Linux Production Release) 1.5.0 .0 Beta
HP HP-UX B.11.23
Sun JRE (Linux Production Release) 1.6.0 04
Sun JDK (Linux Production Release) 1.6.0 04
Sun JDK (Linux Production Release) 1.6.0
SuSE SUSE Linux Enterprise Server 11 SP1
SuSE SUSE Linux Enterprise SDK 11 SP1
Sun JRE (Linux Production Release) 1.6.0 20
Sun JRE (Windows Production Release) 1.6.0 20
Sun JDK (Solaris Production Release) 1.6.0
Apple Mac Os X 10.7.1
Apple Mac Os X Server 10.7
Apple Mac Os X Server 10.7.1
Apple Mac Os X Server 10.7.2
Sun JDK (Windows Production Release) 1.6.0
Sun JDK (Windows Production Release) 1.5.0.0 12
Sun JDK (Linux Production Release) 1.5.0.0 12
Sun JDK (Solaris Production Release) 1.6.0 02
Sun JRE (Windows Production Release) 1.5.0 09-B03
Sun JDK (Solaris Production Release) 1.5.0_31
Sun JDK (Windows Production Release) 1.5.0_31
Sun JDK (Linux Production Release) 1.6.0_27
Sun JDK (Solaris Production Release) 1.6.0_27
Sun JDK (Windows Production Release) 1.6.0_27
Sun JRE (Linux Production Release) 1.5.0_31
Sun JRE (Solaris Production Release) 1.5.0_31
HP Network Node Manager i 9.1
Sun JRE (Linux Production Release) 1.6.0_27
Sun JRE (Solaris Production Release) 1.6.0_27
Sun JRE (Windows Production Release) 1.6.0_27
Sun JRE (Linux Production Release) 1.7
Sun JRE (Solaris Production Release) 1.7
Sun JRE (Windows Production Release) 1.7
Sun JDK (Linux Production Release) 1.5.0_31
Sun JDK (Linux Production Release) 1.5.0.0 03
Sun JDK (Linux Production Release) 1.5.0_32
Sun JDK (Solaris Production Release) 1.5.0 .0 03
Sun JDK (Windows Production Release) 1.5.0_32
Sun JDK (Linux Production Release) 1.6.0_28
Sun JDK (Solaris Production Release) 1.6.0_28
Sun JDK (Linux Production Release) 1.5.0.0 04
Sun JDK (Solaris Production Release) 1.5.0 .0 04
Sun JRE (Linux Production Release) 1.5.0_32
Sun JRE (Solaris Production Release) 1.5.0_32
Sun JRE (Windows Production Release) 1.5.0_32
Sun JRE (Linux Production Release) 1.6.0_28
Sun JRE (Solaris Production Release) 1.6.0_28
Sun JRE (Windows Production Release) 1.6.0_28
Sun JDK (Windows Production Release) 1.5.0 07-B03
Sun JDK (Windows Production Release) 1.5.0 11-B03
Sun JDK (Windows Production Release) 1.6.0 01-B06
IBM Java SE 5.0 SR10
IBM Java SE 5.0 SR11
IBM Java SE 6.0 SR6
IBM Java SE 6.0 SR7
Sun JDK (Linux Production Release) 1.5.0 07-B03
Sun JDK (Linux Production Release) 1.5.0 11-B03
Sun JDK (Linux Production Release) 1.6.0 01-B06
Sun JRE (Solaris Production Release) 1.6.0_22
Sun JDK (Solaris Production Release) 1.5.0 0 10
Sun JDK (Linux Production Release) 1.6.0 14
Sun JRE (Solaris Production Release) 1.5.0_25
Ubuntu Ubuntu Linux 11.10 amd64
Ubuntu Ubuntu Linux 11.10 i386
IBM Java SE 6.0 SR5
Sun JRE (Windows Production Release) 1.5.0.0 07
Sun JRE (Solaris Production Release) 1.5.0.0 07
Sun JDK (Windows Production Release) 1.5.0.0 08
Sun JDK (Linux Production Release) 1.5.0.0 08
Sun JRE (Windows Production Release) 1.5.0.0 08
Sun JRE (Solaris Production Release) 1.5.0.0 08
Sun JDK (Windows Production Release) 1.5.0.0 09
Sun JDK (Linux Production Release) 1.5.0.0 09
Sun JRE (Windows Production Release) 1.5.0.0 09
Sun JRE (Linux Production Release) 1.5.0 14
Sun JRE (Solaris Production Release) 1.5.0 14
Sun JRE (Solaris Production Release) 1.6.0 2
Sun JRE (Windows Production Release) 1.6.0 2
Sun JRE (Windows Production Release) 1.5.0 14
IBM Java SE 6.0.0 SR9-FP2
Apple Mac OS X 10.6.4
Apple Mac OS X Server 10.6.4
Sun JRE (Solaris Production Release) 1.5.0 11
Sun JRE (Windows Production Release) 1.5.0 11
Sun JRE (Solaris Production Release) 1.5.0 10
Sun JRE (Windows Production Release) 1.5.0 10
Apple Mac Os X 10.6.7
Apple Mac Os X Server 10.6.7
Sun JRE (Solaris Production Release) 1.5.0 01
Sun JRE (Windows Production Release) 1.5.0 01
Sun JRE (Solaris Production Release) 1.5.0 02
Sun JRE (Windows Production Release) 1.5.0 02
Sun JRE (Solaris Production Release) 1.5.0 03
Sun JRE (Windows Production Release) 1.5.0 03
Sun JRE (Solaris Production Release) 1.5.0 04
Sun JRE (Windows Production Release) 1.5.0 04
Sun JRE (Solaris Production Release) 1.5.0 05
Sun JRE (Windows Production Release) 1.5.0 05
Sun JDK (Solaris Production Release) 1.5.0 01
Sun JDK (Windows Production Release) 1.5.0 01
Sun JDK (Solaris Production Release) 1.5.0 14
Red Hat Enterprise Linux Desktop 5 Client
Sun JDK (Windows Production Release) 1.5.0 15
Sun JDK (Solaris Production Release) 1.5.0 17
Sun JDK (Windows Production Release) 1.5.0 17
Sun JDK (Solaris Production Release) 1.5.0 18
Sun JDK (Windows Production Release) 1.5.0 18
Sun JDK (Solaris Production Release) 1.5.0 02
Sun JDK (Windows Production Release) 1.5.0 02
Sun JDK (Solaris Production Release) 1.6.0 10
Sun JDK (Windows Production Release) 1.6.0 10
Sun JDK (Solaris Production Release) 1.6.0 04
Sun JDK (Windows Production Release) 1.6.0 04
Sun JDK (Solaris Production Release) 1.6.0 14
Sun JDK (Windows Production Release) 1.6.0 14
Sun JDK (Solaris Production Release) 1.6.0 13
Sun JDK (Windows Production Release) 1.6.0 13
Sun JDK (Solaris Production Release) 1.6.0 11
Sun JDK (Windows Production Release) 1.6.0 11
Sun JRE (Linux Production Release) 1.5.0 18
Sun JRE (Linux Production Release) 1.6.0 13
Sun JDK (Solaris Production Release) 1.6.0 05
Sun JDK (Windows Production Release) 1.6.0 05
Sun JDK (Windows Production Release) 1.6.0 06
Sun JDK (Solaris Production Release) 1.6.0 06
Sun JDK (Solaris Production Release) 1.6.0 07
Sun JDK (Windows Production Release) 1.6.0 07
Sun JDK (Linux Production Release) 1.5.0 18
Sun JDK (Linux Production Release) 1.6.0 13
Sun JDK (Solaris Production Release) 1.7.0
Sun JDK (Windows Production Release) 1.7.0
Sun JRE (Solaris Production Release) 1.6.0
Sun JRE (Windows Production Release) 1.6.0
Sun JRE (Solaris Production Release) 1.6.0 10
Sun JRE (Windows Production Release) 1.6.0 10
Sun JRE (Windows Production Release) 1.5.0 15
Sun JRE (Solaris Production Release) 1.5.0 16
Sun JRE (Windows Production Release) 1.5.0 16
Sun JRE (Solaris Production Release) 1.5.0 18
Hitachi Cosminexus Developer Professional
Sun JRE (Windows Production Release) 1.5.0 18
Sun JRE (Solaris Production Release) 1.6.0 12
Sun JRE (Windows Production Release) 1.6.0 12
Sun JRE (Solaris Production Release) 1.6.0 13
Sun JRE (Windows Production Release) 1.6.0 13
Sun JRE (Solaris Production Release) 1.6.0 04
Sun JRE (Windows Production Release) 1.6.0 04
Sun JRE (Solaris Production Release) 1.6.0 05
Sun JRE (Windows Production Release) 1.6.0 05
Sun JRE (Solaris Production Release) 1.6.0 06
Sun JRE (Windows Production Release) 1.6.0 06
Sun JRE (Solaris Production Release) 1.6.0 07
Sun JRE (Windows Production Release) 1.6.0 07
Hitachi uCosminexus Application Server Enterprise
HP HP-UX B.11.31
Sun JDK (Linux Production Release) 1.5.0_27
Sun JDK (Solaris Production Release) 1.5.0_27
Sun JDK (Windows Production Release) 1.5.0_27
Sun JRE (Linux Production Release) 1.5.0_27
Sun JRE (Solaris Production Release) 1.5.0_27
Sun JRE (Windows Production Release) 1.5.0_27
Red Hat Fedora 16
HP JDK and JRE 7.0.0
Sun JDK (Linux Production Release) 1.6.0_21
Sun JDK (Linux Production Release) 1.6.0_22
Sun JDK (Linux Production Release) 1.5.0_25
Sun JDK (Linux Production Release) 1.5.0_26
Sun JDK (Solaris Production Release) 1.6.0_21
Sun JDK (Solaris Production Release) 1.6.0_22
Sun JDK (Solaris Production Release) 1.5.0_25
Sun JDK (Solaris Production Release) 1.5.0_26
Sun JDK (Windows Production Release) 1.6.0_21
Sun JDK (Windows Production Release) 1.6.0_22
Sun JDK (Windows Production Release) 1.5.0_25
Sun JDK (Windows Production Release) 1.5.0_26
Sun JRE (Linux Production Release) 1.6.0_21
Sun JRE (Linux Production Release) 1.6.0_22
Sun JRE (Linux Production Release) 1.5.0_25
Hitachi uCosminexus Application Server Standard
Sun JDK (Solaris Production Release) 1.5.0_29
Sun JDK (Windows Production Release) 1.5.0_29
Sun JRE (Solaris Production Release) 1.6.0_21
Sun JDK (Solaris Production Release) 1.6.0_25
Hitachi uCosminexus Application Server Smart Edition
Sun JRE (Solaris Production Release) 1.5.0_26
Hitachi uCosminexus Developer Standard
Hitachi uCosminexus Developer Professional
Sun JRE (Windows Production Release) 1.6.0_21
Sun JRE (Solaris Production Release) 1.5.0_29
Sun JRE (Windows Production Release) 1.5.0_25
Sun JRE (Solaris Production Release) 1.6.0_25
Hitachi uCosminexus Service Platform
Sun JRE (Windows Production Release) 1.6.0_25
Hitachi uCosminexus Service Architect
Mandriva Enterprise Server 5
Sun JDK (Linux Production Release) 1.6.0 02
Sun JDK (Windows Production Release) 1.6.0 02
Sun JRE (Windows Production Release) 1.5.0_31
Sun JRE (Linux Production Release) 1.6.0 02
Sun JRE (Solaris Production Release) 1.6.0 01
Sun JRE (Solaris Production Release) 1.6.0 02
Sun JRE (Windows Production Release) 1.6.0 01
Sun JRE (Windows Production Release) 1.6.0 02
Sun JDK (Windows Production Release) 1.5.0 12
Sun JDK (Windows Production Release) 1.5.0 13
Sun JDK (Solaris Production Release) 1.5.0 11
Sun JDK (Solaris Production Release) 1.5.0 12
Sun JDK (Solaris Production Release) 1.5.0 13
Sun JDK (Linux Production Release) 1.5.0 13
Sun JRE (Linux Production Release) 1.5.0 12
Sun JRE (Linux Production Release) 1.5.0 13
Sun JRE (Solaris Production Release) 1.5.0 12
Sun JRE (Solaris Production Release) 1.5.0 13
Sun JRE (Windows Production Release) 1.5.0 12
Sun JRE (Windows Production Release) 1.5.0 13
Sun JDK (Solaris Production Release) 1.6.0 03
Sun JDK (Linux Production Release) 1.6.0 03
Sun JDK (Linux Production Release) 1.6.0_25
Sun JDK (Windows Production Release) 1.6.0 03
Sun JRE (Linux Production Release) 1.6.0 03
Sun JRE (Solaris Production Release) 1.6.0 03
Sun JRE (Windows Production Release) 1.6.0 03
Ubuntu Ubuntu Linux 10.04 ARM
Ubuntu Ubuntu Linux 10.10 ARM
Hitachi uCosminexus Developer Light
Sun JDK (Windows Production Release) 1.5.0.0 06
Sun JDK (Linux Production Release) 1.5.0 06
IBM Java SE 5.0 SR12-FP5
Sun JDK (Solaris Production Release) 1.5.0 06
Hitachi Cosminexus Studio - Web Edition
Sun JDK (Solaris Production Release) 1.5.0_32
Sun JDK (Windows Production Release) 1.5.0 .0 03
Red Hat Enterprise Linux Desktop Supplementary 5 Client
Red Hat Enterprise Linux 5 Server
Sun JRE (Linux Production Release) 1.5.0 08
Sun JDK (Windows Production Release) 1.6.0_25
Sun JRE (Linux Production Release) 1.5.0 10
Sun JDK (Linux Production Release) 1.5.0.0 11
Sun JDK (Windows Production Release) 1.5.0.0 11
Sun JRE (Linux Production Release) 1.5.0 11
Sun JDK (Windows Production Release) 1.6.0_28
Sun JDK (Linux Production Release) 1.6.0 01
Sun JRE (Linux Production Release) 1.5.0 17
Sun JRE (Windows Production Release) 1.5.0 17
Sun JRE (Solaris Production Release) 1.5.0 17
Sun JDK (Linux Production Release) 1.5.0_30
Sun JDK (Linux Production Release) 1.6.0_26
Sun JDK (Solaris Production Release) 1.5.0_30
Sun JDK (Solaris Production Release) 1.6.0_26
Sun JDK (Windows Production Release) 1.5.0_30
Sun JDK (Windows Production Release) 1.6.0_26
Sun JRE (Linux Production Release) 1.5.0_30
Sun JRE (Linux Production Release) 1.6.0_26
Sun JRE (Solaris Production Release) 1.5.0_30
Sun JRE (Solaris Production Release) 1.6.0_26
Sun JRE (Windows Production Release) 1.5.0_30
Sun JRE (Windows Production Release) 1.6.0_26
Sun JDK (Linux Production Release) 1.6.0 15
Sun JDK (Windows Production Release) 1.6.0 15
Sun JDK (Solaris Production Release) 1.6.0 15
Sun JRE (Solaris Production Release) 1.6.0 15
Sun JRE (Windows Production Release) 1.6.0 15
Sun JRE (Linux Production Release) 1.6.0 15
Sun JDK (Linux Production Release) 1.5.0 20
Sun JDK (Windows Production Release) 1.5.0 20
Sun JDK (Solaris Production Release) 1.5.0 20
Sun JRE (Solaris Production Release) 1.5.0 20
Sun JRE (Windows Production Release) 1.5.0 20
Sun JRE (Linux Production Release) 1.5.0 20
Ubuntu Ubuntu Linux 10.04 Amd64
Ubuntu Ubuntu Linux 10.04 I386
Ubuntu Ubuntu Linux 10.04 Powerpc
Ubuntu Ubuntu Linux 10.04 Sparc
Red Hat Enterprise Linux Extras 4
Sun JDK (Linux Production Release) 1.5.0 0 10
Sun JDK (Windows Production Release) 1.5.0 0 10
Hitachi uCosminexus Application Server Standard-R
Hitachi uCosminexus Client for Plug-in
Hitachi uCosminexus Developer 01
Hitachi uCosminexus Application Server Light
Hitachi uCosminexus Primary Server Base
Hitachi uCosminexus Service Platform - Messaging
Hitachi uCosminexus Developer Professional for Plug-in
Hitachi Cosminexus Application Server Enterprise
Hitachi Cosminexus Application Server Standard
Hitachi Cosminexus Client
Hitachi Cosminexus Developer Light
Hitachi Cosminexus Application Server
Hitachi Cosminexus Developer Standard
Hitachi Cosminexus Studio - Standard Edition
Hitachi Cosminexus Primary Server Base
Mandriva Linux Mandrake 2010.1 X86 64
Mandriva Linux Mandrake 2010.1
Hitachi Cosminexus Developer
Hitachi Cosminexus Studio
Debian Linux 6.0 s/390
SuSE SUSE Linux Enterprise Server for VMware 11 SP1
Sun JRE (Linux Production Release) 1.6.0 17
Sun JRE (Linux Production Release) 1.5.0 22
Sun JRE (Solaris Production Release) 1.6.0 17
Sun JRE (Solaris Production Release) 1.5.0 22
Sun JRE (Windows Production Release) 1.6.0 17
Sun JRE (Windows Production Release) 1.5.0 22
Mandriva Enterprise Server 5 X86 64
Sun JDK (Linux Production Release) 1.6.0 17
Sun JDK (Linux Production Release) 1.5.0 22
Sun JDK (Solaris Production Release) 1.6.0 17
Sun JDK (Solaris Production Release) 1.5.0 22
Sun JDK (Windows Production Release) 1.6.0 17
Sun JDK (Windows Production Release) 1.5.0 22
IBM JAVA IBM 31-bit SDK for z/OS 5.0
Sun JRE (Linux Production Release) 1.5.0_26

APP:IPMI-CIPHER-ZERO - APP: IPMI Cipher Zero Authentication Bypass And Arbitrary Command Execution

Severity: CRITICAL

Description:

This signature detects attempts to exploit a known implementation flaw in the IPMI protocol. A successful attack can lead to arbitrary code execution.

Supported On:

idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, idp-4.2.0, idp-5.0.0, mx-9.4, isg-3.0.0, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, srx-9.2, srx-branch-9.4, j-series-9.5, idp-4.2.110100823, srx-10.0, srx-branch-10.0, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, srx-11.4, srx-branch-11.4, idp-4.1.110110719, mx-11.4, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, isg-3.5.140347, idp-5.1.110131122, isg-3.5.140407, idp-5.1.110140207, vsrx-12.1

References:

Affected Products:

hp integrated_lights-out_bmc

HTTP:STC:MOZILLA:NSCSSVALUE-OF - HTTP: Mozilla Products nsCSSValue Array Index Integer Overflow

Severity: HIGH

Description:

This signature detects attempts to exploit a known vulnerability in Mozilla Products. A successful attack can lead to a integer overflow and arbitrary remote code execution within the context of the server.

Supported On:

References:

cve: CVE-2010-2752
bugtraq: 41852

Affected Products:

Avaya Messaging Storage Server 1.0
Avaya Messaging Storage Server 2.0
Avaya Messaging Storage Server 5.2
Avaya Message Networking
Sun Solaris 10 Sparc
Mozilla Firefox 3.5.6
Mozilla SeaMonkey 2.0.1
Mozilla Firefox 3.5.9
Mozilla Firefox 3.6.2
Avaya Intuity AUDIX LX 1.0
Ubuntu Ubuntu Linux 8.04 LTS Amd64
Ubuntu Ubuntu Linux 8.04 LTS I386
Ubuntu Ubuntu Linux 8.04 LTS Lpia
Ubuntu Ubuntu Linux 8.04 LTS Powerpc
Ubuntu Ubuntu Linux 8.04 LTS Sparc
Mozilla Firefox 3.5.7
Avaya Aura System Manager 6.0 SP1
Avaya Messaging Storage Server
Mozilla Firefox 3.5.5
Red Hat Desktop 4.0.0
Avaya Aura System Manager 1.0
Ubuntu Ubuntu Linux 9.10 Amd64
Ubuntu Ubuntu Linux 9.10 I386
Ubuntu Ubuntu Linux 9.10 Lpia
Ubuntu Ubuntu Linux 9.10 Powerpc
Ubuntu Ubuntu Linux 9.10 Sparc
Avaya Aura Session Manager 1.1
Mozilla Firefox 3.6.2
Mozilla SeaMonkey 2.0.5
Mozilla Firefox 3.6.4
Mozilla Firefox 3.5.10
Mozilla Thunderbird 3.0.5
Slackware Linux 13.0
Slackware Linux 13.0 X86 64
SuSE SUSE Linux Enterprise Desktop 11
Avaya Intuity AUDIX LX 2.0 SP1
Avaya Intuity AUDIX LX 2.0 SP2
Mozilla Firefox 3.5.0
Avaya Intuity AUDIX LX 2.0
Avaya Intuity AUDIX LX R1.1
SuSE SUSE Linux Enterprise SDK 10 SP3
SuSE SUSE Linux Enterprise Desktop 10 SP3
SuSE SUSE Linux Enterprise Server 10 SP3
Red Hat Fedora 12
SuSE SUSE Linux Enterprise Server 11 SP1
SuSE SUSE Linux Enterprise Server 11
SuSE SUSE Linux Enterprise SDK 11 SP1
Avaya Messaging Storage Server 5.0
Avaya Aura Session Manager 5.2 SP1
Avaya Aura Session Manager 5.2 SP2
Avaya Message Networking 5.2
Avaya Messaging Storage Server 3.1
Avaya Message Networking 3.1
Avaya Messaging Storage Server 3.1 SP1
Mozilla Thunderbird 3.0.1
Sun Solaris 10 X86
Avaya IQ 5
Mozilla Thunderbird 3.0.4
Mozilla SeaMonkey 2.0.4
Slackware Linux X86 64 -Current
Avaya Aura Session Manager 1.0
Avaya IQ 5.1
Avaya Aura System Manager 5.2
Ubuntu Ubuntu Linux 9.04 Amd64
Ubuntu Ubuntu Linux 9.04 I386
Ubuntu Ubuntu Linux 9.04 Lpia
Ubuntu Ubuntu Linux 9.04 Powerpc
Ubuntu Ubuntu Linux 9.04 Sparc
Red Hat Enterprise Linux Desktop Workstation 5 Client
Red Hat Enterprise Linux 5 Server
Mozilla Firefox 3.5.3
Mozilla Firefox 3.6.3
Slackware Linux -Current
SuSE SUSE Linux Enterprise Desktop 11 SP1
Avaya Messaging Storage Server 5.1
Mozilla Firefox 3.5.8
Mozilla SeaMonkey 2.0.2
Mozilla SeaMonkey 2.0.3
Mozilla Thunderbird 3.0.2
Mozilla Firefox 3.6
SuSE SUSE Linux Enterprise SDK 11
Red Hat Fedora 13
Avaya Aura Session Manager 5.2
Mozilla Firefox 3.5.4
Mozilla SeaMonkey 2.0
Mozilla Thunderbird 3.0
Ubuntu Ubuntu Linux 10.04 Amd64
Ubuntu Ubuntu Linux 10.04 I386
Ubuntu Ubuntu Linux 10.04 Powerpc
Ubuntu Ubuntu Linux 10.04 Sparc
Avaya Messaging Storage Server MM3.0
Mozilla Firefox 3.5.2
Avaya Aura Session Manager 6.0
Red Hat Enterprise Linux AS 4
Red Hat Enterprise Linux ES 4
Red Hat Enterprise Linux WS 4
Red Hat Enterprise Linux Desktop Version 4
Mozilla Firefox 3.5.1
Avaya Message Networking MN 3.1
SuSE openSUSE 11.3
Avaya Messaging Storage Server 4.0
Slackware Linux 13.1
Slackware Linux 13.1 X86 64
SuSE openSUSE 11.2
Slackware Linux 12.2
Sun Solaris 11 Express
SuSE openSUSE 11.1
Pardus Linux 2009

HTTP:MISC:HP-RELEASE-CONTROL - HTTP: HP Release Control Authenticated Privilege Escalation

Severity: HIGH

Description:

This signature detects attempts to exploit a known vulnerability against Newgen OmniDocs. A successful attack may result in unauthorized privilege escalation.

Supported On:

References:

bugtraq: 67461

HTTP:MISC:COGENT-SERVER-CMD-INJ - HTTP: Cogent DataHub Web Server GetPermissions.asp Command Injection

Severity: HIGH

Description:

This signature detects attempts to exploit a command injection vulnerability in Cogent DataHub Web Server. A successful attack can lead to execute arbitrary commands within the security context of the server.

Supported On:

References:

cve: CVE-2014-3789

WORM:CRYPTOLOCKER-RACKETEER - WORM: Cryptolocker 2.0 Racketeer Ransomware Download

Severity: MEDIUM

Description:

This signature detects Cryptolocker 2.0 Racketeer ransomware being transferred over network. This malware encrypts a user's local files which can only be decrypted after paying a certain ransom amount. A successful infection could leave no local copies of files that users can access without completing the payment.

Supported On:

SSL:OPENSSL-MITM-SEC-BYPASS - SSL: OpenSSL ChangeCipherSpec MITM Security Bypass

Severity: HIGH

Description:

This signature detects attempts to exploit a known security-bypass vulnerability against OpenSSL. A successful exploitation would provide an attacker the ability to decrypt traffic and inject plaintext into a TLS connection.

Supported On:

idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, idp-4.2.0, idp-5.0.0, mx-9.4, isg-3.4.0, isg-3.5.0, srx-9.2, srx-branch-9.4, j-series-9.5, idp-4.2.110100823, srx-10.0, srx-branch-10.0, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, srx-11.4, srx-branch-11.4, idp-4.1.110110719, mx-11.4, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, isg-3.5.140347, idp-5.1.110131122, isg-3.5.140407, idp-5.1.110140207, vsrx-12.1

References:

bugtraq: 67899
cve: CVE-2014-0224

HTTP:STC:ADOBE:READER-UAF - HTTP: Adobe PDF Reader CVE-2014-0527 Use-After-Free

Severity: HIGH

Description:

This signature detects attempts to exploit a known vulnerability in the Adobe Acrobat Reader. A successful attack can lead to a user after free condition and arbitrary remote code execution within the context of the user.

Supported On:

idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, idp-4.2.0, idp-5.0.0, mx-9.4, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, srx-9.2, srx-branch-9.4, j-series-9.5, idp-4.2.110100823, srx-10.0, srx-branch-10.0, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, srx-11.4, srx-branch-11.4, idp-4.1.110110719, mx-11.4, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, isg-3.5.140347, idp-5.1.110131122, isg-3.5.140407, idp-5.1.110140207, vsrx-12.1

References:

bugtraq: 67367
cve: CVE-2014-0527