Update Details
Update #3380 (05/06/2021)
2 updated signatures:
| MEDIUM | HTTP:XSS:NETGATE-PFSENSE-XSS | HTTP: Netgate pfSense Stored Cross-Site Scripting |
| INFO | P2P:MISC:MANOLITO | P2P: Manolito |
Details of the signatures included within this bulletin:
HTTP:XSS:NETGATE-PFSENSE-XSS - HTTP: Netgate pfSense Stored Cross-Site Scripting
Severity: MEDIUM
Description:
This signature detects attempts to exploit a known vulnerability against Netgate pfSense. A successful attack can lead to Cross-Site Scripting attack.
Supported On:
idp-5.1.110161014, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, isg-3.0.0, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, vsrx3bsd-18.2, isg-3.5.0, srx-19.1, vsrx3bsd-19.1, vsrx-19.1, j-series-9.5, vsrx-19.2, srx-19.2, srx-branch-19.2, idp-4.2.110100823, srx-19.4, vsrx3bsd-19.4, srx-branch-19.4, vsrx-19.4, vmx-19.4, mx-19.4, idp-4.2.110101203, idp-5.1.0, srx-branch-19.1, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, vsrx3bsd-19.2, idp-5.0.0, srx-18.2, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, srx-17.4, idp-5.1.110170603, vsrx-15.1
References:
- cve: CVE-2021-27933
- url: https://redmine.pfsense.org/issues/9554#change-40729
- cve: CVE-2019-8953
- url: https://redmine.pfsense.org/issues/9335
- cve: CVE-2019-12347
Affected Products:
- Netgate haproxy
P2P:MISC:MANOLITO - P2P: Manolito
Severity: INFO
Description:
This signature detects Manolito search queries. Manolito is a peer-to-peer music sharing network developed by Pablo Soto. The Manolito client suite includes Blubster, Piolet, Manolito, and the RockItNet.
Supported On:
idp-5.1.110161014, idp-4.1.0, mx-16.1, idp-4.2.0, srx-17.3, vmx-17.4, isg-3.5.141818, vsrx-17.4, srx-branch-17.4, srx-17.4, idp-5.1.110170603, vsrx3bsd-18.2, isg-3.5.0, srx-19.1, vsrx3bsd-19.1, vsrx-19.1, j-series-9.5, vsrx-19.2, srx-19.2, srx-branch-19.2, idp-4.2.110100823, srx-19.4, vsrx3bsd-19.4, srx-branch-19.4, vsrx-19.4, vmx-19.4, mx-19.4, idp-4.2.110101203, idp-5.1.0, srx-branch-19.1, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, vsrx3bsd-19.2, idp-5.0.0, srx-18.2, idp-5.0.110121210, srx-12.1, srx-branch-12.1, idp-5.0.110130325, vsrx-12.1, vsrx-15.1