Description

Download Security Update 18 Release Notes (PDF)

Use the LiveUpdate feature of Symantec NetRecon 3.6 to download the security update.

Symantec NetRecon 3.6 Security Update 18 (SU 18) detects and reports 9 new vulnerabilities and provides enhanced detection of 5 vulnerabilities.

New vulnerabilities

• Cisco Catalyst 3500 XL Remote Arbitrary Command Execution Vulnerability
• Cisco Context Based Access Control Protocol Check Bypassing Vulnerability
• Cisco IOS HTTP %% Vulnerability
• Cisco IOS HTTP Router Management Service Malformed Request Denial Of Service Vulnerability
• Microsoft Windows COM Internet Service/RPC Over HTTP Remote Denial Of Service Vulnerability
• Microsoft Windows Help And Support Center URI Validation Code Execution Vulnerability
• Microsoft Windows Object Identity Network Communication Vulnerability
• Microsoft Windows RPCSS Multi-thread Race Condition Vulnerability
• Microsoft Windows RPCSS Service Remote Denial Of Service Vulnerability

Revised vulnerabilities

• Microsoft Internet Explorer MHTML Forced File Execution Vulnerability
  Now considers patch KB837009 before reporting
  
• Microsoft Internet Explorer Browser MHTML Redirection Local File Parsing
  Now considers patch KB837009 before reporting
  
• Microsoft IE Invalid ContentType Cache Directory Location Disclosure
  Now considers patch KB837009 before reporting
  
• Microsoft IE File Download Warning Bypass Vulnerability
  Now considers patch KB810847 before reporting
  
• Microsoft Internet Explorer MT-ITS Protocol Zone Bypass Vulnerability
  Now considers patch KB837009 before reporting
  

For details, download the Security Update 18 Release Notes (PDF).