Symantec Security Response: NetProwler 3.0 Security Update 11

8 August, 2000

NetProwler 3.0 Security Update 13

Download update now.

Description

NetProwler 3.0 SU13 introduces signatures that detect malicious embedded e-mail content, and a variety of attacks against web servers. This update contains contains 16 new signatures, and supercedes updates 6, 7, 8, 9, 10, 11, and 12.

Updated/New Signatures

CFMLSyntaxCheck_CGI
CodeBrws_CGI
EMail_Embedded_Access_Object
EMail_Embedded_Excel_Object
EMail_Embedded_JavaScript
EMail_Embedded_PowerPoint_Object
EMail_Embedded_Script
EMail_Embedded_VBScript
Evaluate_CGI
ExprCalc_CGI
FileExists_CGI
MainFrameSet_CGI
NTFS_DATA_Suffix
SourceWindow_CGI
ViewCode_CGI
WebHits_CGI

Other Included Signatures

HTTP_session_splicing_detected

Additional Resources

Cold Fusion 4.0 Vulnerabilities
Allaire Security Bulletin regarding Cold Fusion samples.
Microsoft KnowledgeBase article regarding vulnerable sample Active Server Pages
Microsoft FAQ "The Office HTML Script Vulnerability."
Microsoft Security Bulletin "The Office HTML Script Vulnerability."
Microsoft Security Bulletin "Persistent Mail-Browser Link Vulnerability."
MS Security Bulletin "Cache Bypass Vulnerability."
MS Security Bulletin regarding NTFS_Data_Suffix

Last modified on: Thursday, 27-Sep-01 11:01:21