Thread Info
  • Locked Locked
  • Replies 1 reply
  • Subscribers 3 subscribers
  • Views 1877 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability

Alexander Busch

I'm a little disappointed that this is not covered by the IPS, at least it's not in the rules list. Maybe this can't be handled by snort, I don't know.

Some information:
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8581

and some in german:
https://www.frankysweb.de/active-directory-und-exchange-server-ueber-ews-api-angreifbar/

Please be aware of this.

Best regards

Alex

 

P.S. The rules are here: https://lists.astaro.com/ASGV9-IPS-rules.html#221



This thread was automatically locked due to age.
Parents

  • Thanks, Alex.  It does look like Snort would have to block desired traffic to address this and that the fix has to be in the registry of the Exchange server.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply

  • Thanks, Alex.  It does look like Snort would have to block desired traffic to address this and that the fix has to be in the registry of the Exchange server.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML