CRITICAL: Proventia 22.34 includes events for several Microsoft Products. Detection is provided for issues in Microsoft bulletins MS04-031, MS04-034,MS04-035,and MS04-036. See the following X-Force Alert for more information: http://xforce.iss.net/xforce/alerts/id/183.
Checks:
| Risk | VulnID | Check Name | Category |
| High | 3340 | TrojanCow_TCP_Request | Unauthorized Access Attempt |
| High | 13889 | HTTP_Yahoo_YAutoDLL_BO | Unauthorized Access Attempt |
| High | 15147 | NOSecure_TCP_Request | Unauthorized Access Attempt |
| Low | 15634 | WinMX_Download | Protocol Signature |
| High | 15741 | Phoenix_TCP_Response | Unauthorized Access Attempt |
| High | 16044 | HTTP_CrystalReports_FileAccess_DoS | Denial of Service |
| Medium | 16269 | HTTP_AresGalaxy | Protocol Signature |
| High | 16360 | HTTP_Squid_NTLM_Password_Bo | Unauthorized Access Attempt |
| Medium | 16429 | HTTP_ApcRunner_ExecuteCode | Unauthorized Access Attempt |
| Low | 16504 | SMTP_BDAT_Large_Chunk | Suspicious Activity |
| High | 16556 | MSRPC_NetDDE_Bo | Unauthorized Access Attempt |
| Medium | 16604 | MySQL_Check_Scramble_Auth_Bypass | Unauthorized Access Attempt |
| Low | 16696 | SMS_Remote_Service_DoS | Denial of Service |
| Medium | 16889 | HTTP_Apache_ServerStatus | Pre-attack Probe |
| Medium | 16890 | HTTP_Apache_ServerInfo | Suspicious Activity |
| High | 17590 | Kika_TCP_Request | Unauthorized Access Attempt |
| High | 17590 | Kika_UDP_Request | Unauthorized Access Attempt |
| High | 17620 | HTTP_IE_InstallEngineCtl_Overflow | Unauthorized Access Attempt |
| High | 17621 | DNS_Windows_SMTP_Overflow | Unauthorized Access Attempt |
| High | 17622 | IP_Invalid_Option | Suspicious Activity |
| High | 17623 | IP_Tunnel_Bad_Version | Suspicious Activity |
| High | 17624 | MS_Compressed_Folders_Overflow | Unauthorized Access Attempt |
| Low | 17625 | SMTP_Nondeliverable_Notification | Protocol Signature |
| High | 17641 | Windows_NNTP_Overflow | Unauthorized Access Attempt |
| Medium | 17644 | HTTP_ASP_Security_Bypass | Unauthorized Access Attempt |
If you are an existing customer or partner, and you wish to download X-Press Updates from our download center, click here.
