This X-Press Update™ product enhancement (XPU) 22.37, featuring Virtual Patch ™ technology, includes detection of SSH brute force attacks, Windows IE, and SMTP. Also in this XPU are 11 security content updates and blocking for 99 existing events have been enabled.
Checks:
| Risk | VulnID | Check Name | Category |
| High | 15785 | WinCrash_TCP_Response | Unauthorized Access Attempt |
| High | 16664 | HTML_Win_Grpconv_Overflow | Unauthorized Access Attempt |
| High | 16874 | XLog_TCP_Response | Unauthorized Access Attempt |
| High | 16875 | Xanadu_TCP_Request | Unauthorized Access Attempt |
| High | 16875 | Xanadu_TCP_Response | Unauthorized Access Attempt |
| High | 16875 | Xanadu_UDP_Request | Unauthorized Access Attempt |
| High | 16875 | Xanadu_UDP_Response | Unauthorized Access Attempt |
| High | 16998 | HTTP_Acrobat_ActiveX_Overflow | Unauthorized Access Attempt |
| High | 17475 | SSH_Brute_Force | Suspicious Activity |
| High | 17479 | WindowsMite_TCP_Response | Unauthorized Access Attempt |
| High | 17518 | SMTP_YPOPs_Overflow | Unauthorized Access Attempt |
| High | 17526 | Tron_TCP_Request | Unauthorized Access Attempt |
| High | 17526 | Tron_TCP_Response | Unauthorized Access Attempt |
| Low | 17645 | HTTP_WebDAV_XML_Attribute_DoS | Denial of Service |
| Medium | 17938 | HTTP_IE_Status_Spoof | Suspicious Activity |
| Low | 18024 | FTP_Long_MKD | Suspicious Activity |
| High | 18062 | HTTP_Twiki_Search_CmdExec | Unauthorized Access Attempt |
| High | 18154 | IRC_Generic_Trojan | Unauthorized Access Attempt |
| High | 18342 | DHCP_Long_Hardware_Address | Unauthorized Access Attempt |
| Low | 18378 | Image_ICON_Malformed | Suspicious Activity |
| High | 18385 | Rwhod_Malformed | Unauthorized Access Attempt |
| High | 18388 | SMTP_Routing_Integer_Overflow | Unauthorized Access Attempt |
| High | 18389 | SMTP_Routing_Overflow | Unauthorized Access Attempt |
If you are an existing customer or partner, and you wish to download X-Press Updates from our download center, click here.
