Signature, 41846/1 matches on the Site of Adobe

Hi, today I noticed that a new signature, 41846/1 started matching on different IPs belonging to

Adobe Systems Inc..  ThePlanet.com Internet Services, Inc. or.

Here I post some events detected by the IP addresses:

Gravity

Date

Time

The name of the GIS.

The ID of the GIS.

Attacker IP

Victim IP

Vicitm Port

Threat assessment

Level of risk

High

15/02/2012

08:56:26

Generic Cross-Site Scripting Attack

41846/1

1.2.3.4

66.235.132.152

80

60

95

High

15/02/2012

08:56:27

Generic Cross-Site Scripting Attack

41846/1

1.2.3.4

66.235.134.160

80

60

95

High

15/02/2012

08:56:27

Generic Cross-Site Scripting Attack

41846/1

1.2.3.4

66.235.139.121

80

60

95

High

15/02/2012

09:00:38

Generic Cross-Site Scripting Attack

41846/1

1.2.3.4

66.235.132.152

80

60

95

High

15/02/2012

09:00:38

Generic Cross-Site Scripting Attack

41846/1

1.2.3.4

66.235.134.160

80

60

95

The IP of the attacker "1.2.3.4. would be the IP of the proxy.

By analyzing the proxy logs, I saw that a lot of different computers on my network are trying to reach the sites of Adobe to download a new version or an update, that is:

GET http://swupmf.adobe.com/manifest/50/win/AdobeUpdater.upd HTTP/1.1

GET http://armmf.adobe.com/arm-manifests/win/Reader9Manifest.msi HTTP/1.1

GET http://armdl.adobe.com/pub/adobe/reader/win/9.x/9.5.0/es_ES/AdbeRdr950_es_ES.exe HTTP/1.1

So my first question is why the attempt to reach the Adobe site match an IPS signature linked to an attempt to Cross Site Scripting.

As I have reasearched, 41846/1A signature was published in order to attend the CVE-2012-0017: ' Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 gold and SP1 allows remote attackers to inject arbitrary script or HTML via JavaScript sequences in a web URL, alias 'XSS in inplview.aspx vulnerability.' "

Then, my second question is how the Adobe site is related to CVE-2012-0017

Thank you.

Best regards, Dana

Hi Dana,

You and I must have been posted at the same time.  We noticed that a problem with this signature on one of our s sensor this morning after that S625 has been applied.  Addresses "pirate" are all internal and addresses 'target' are all over the Board, some internal and externals.  I had to disable this because it fires so often, 128 times during the last one hour.  I hope that people from Cisco can take a look at this and soon to release an update.

Tags: Cisco Security

Similar Questions

  • I have Dreamweaver CS6 but want to update for cc, how ever I did mine and I sign in and upward at the site web adobe and want to use css Designer because with my courses, I do and they use CC. How can I get upgrade with refund f

    I have Dreamweaver CS6 but want to update for cc, how ever I did mine and I sign in and upward at the site web adobe and want to use css Designer because with my courses, I do and they use CC. How can I get the upgrade with this new refund. Thank you

    There is no way to update the version of perpetual license / DWCS6 drive to the creative cloud, they are two completely separate programs. There used to be a discount for the Creative Suite owners switch to CC, but that ship has sailed.

    If you want to the CSS designer, you will need a subscription here: pricing and membership creative cloud plans | Adobe Creative Cloud

  • When I go on the site of adobe and then try to download the software, a message appears saying that safari can't open a page that starts with "Mao."

    I bought a subscription to a cloud creative adobe Photoshop and Lightroom. When I go on the site of adobe and then try to download the software, a message appears saying that safari can't open a page that starts with "Mao."

    Download & install instructions https://forums.adobe.com/thread/2003339 can help

    -includes a link to access a page to download the Adobe programs if you do not have a disk or drive

    Also go to https://forums.adobe.com/community/creative_cloud/creative_cloud_faq

  • OK kids here it is: I have a VERY OLD VERSION 6.0 standard. I am doing work on a computer windows vista laptop. ANY IDEAS? I installed it but it keeps sending me to the site web adobe and support says that it KNOWS something THAT the guys

    OK kids here it is: I have a VERY OLD VERSION 6.0 standard. I am doing work on a computer windows vista laptop. ANY IDEAS? I installed it but it keeps sending me to the site web adobe and support says that it KNOWS something THAT the guys

    There is no way to get Acrobat 6 to be fully installed and works on any version of Windows beyond Windows XP, 32-bit only! There's a way to upgrade to cheap since Acrobat 6, who is now 6 versions behind the current version. Sorry!

    -Dov

  • I lost 5 Lightroom bought in Dec 2014 and want to download another copy with a serial number.  It is not available on the site of Adobe Web and Im not interested in Lightroom CC.  Can you direct me to an appropriate site? Thanks Frank

    I lost 5 Lightroom bought in Dec 2014 and want to download another copy with a serial number.  It is not available on the site of Adobe Web and Im not interested in Lightroom CC.  Can you direct me to an appropriate site? Thanks Frank

    Lightroom - all versions

    Windows

    http://www.Adobe.com/support/downloads/product.jsp?product=113&platform=Windows

    Mac

    http://www.Adobe.com/support/downloads/product.jsp?product=113&platform=Macintosh

  • Strange symbols on the site settings.adobe

    Dear Sir or Madam

    When I open the https://settings.adobe.com/flashplayer/mobile/ Web site to costumize the settings of flash player that I get some weird symbols but nothing more.

    I tried to disable all the addons I have but it didn't work as the theme I use. Then I reinstalled the flash but kept pursuing the issue. Then I reinstalled Firefox but still no solution.

    I can send a ss on this issue if necessary.

    Any help would be appreciated.

    Yours sincerely.

    This is a known issue with Firefox for Android and some sites in Flash.

  • share photos on the site of adobe muse

    I'm designing a wedding site. Y at - it an application that I can use with Adobe Muse so that customers can download the photo of their mobile phone directly on the site? I found an app: social Wed, but I don't think it's compatible with the muse. Help, please!

    Hello

    By your need, you need space on the server, so if you download pictures, you can store it, view other users on the front end. Adobe Muse is just a design software, and for the moment, muse of adobe does not download the content. If you need a third party webform, then download the images on your server. Once the images have been uploaded, you can add them to a page and display a user.

    Let me know if you have any question.

  • How can I add the cookies for the site of adobe muse?

    Hello

    I created a site in Adobe Muse, I also host through the adobe business catalyst webbasic account.

    I want to add a message of cookies on my site, as well as to that of client sites I create.

    I searched the forum and there seems to be a guide showing how to get cookies in place in pot of company adobe itself. However, when I try to follow the instructions, I fall at the first hurdle because he told me to go to the Site Manager, then in the Pages. However, I have nothing that says Pages. Mine has only two options; Web forms and e-mails from System. The only thing in the Web Forms folder is Contact form.

    I have no idea how to get the message of cookies on my Adobe Muse site. Please... anyone know the answer?

    In addition, if someone from Adobe reads this, it would be great that if Adobe Muse had a widget for this... considering it is now mandatory for all Web sites that use cookies in order to obtain consent. I hope it's in the next update.

    See you soon

    Sebastian

    Refer to this topic for instructions on adding a form of cookies to Manage - http://forums.adobe.com/message/539301

    Online content editing is disabled by default for sites published through Muse to BC and so the Pages tab appears for you under the Site Manager. However, you can always turn on the change content online by logging into the site administrator-> to go to the section my details (hovering over your name at the top right) and select the option as shown in the screenshot below.

    Please see the post below for a reason which is why the option is incompatible with the Muse (but does affect all of the features as such if you enable it).

    http://forums.adobe.com/message/4385787.

    Thank you

    Vinayak

  • I'm a little confused about the presentation of the day, the Site of Adobe.

    You can only if compiled with the Muse?  Where can you submit a side already built with the code?

    The sites in the Site Gallery Of The Day www.adobekb.com are sites of Muse. Several contain HTML embed code for maps, Twitter RSS, video, analytics, forms, etc., which can be simply copied/pasted in the mode Design of Muse. Some contain animations created and place/imported edge animate or Flash Pro.

    We do of our best to screen the site of winners day to exclude sites that have been achieved by editing the HTML generated by Muse after export, given that this workflow requires hand coding that isn't what Muse. Code embed of sites including copied/pasted or small code snippets inserted in theSection of the Page within Muse properties are very well.

    A few caveats

    (1) we recently removed a site which has relied on the hand of edition after export of Muse, who either did not contain this code when the price has been granted, or we lack.

    (2) authors of sites are likely to change their designs after the granting of this award, so the site linked to may not be the exact site/code which received the honours of the Site Of The Day.

    If you see a site in the gallery and are intrigued by the way it was created with Muse, ask about it here. I am sure that the community would be happy to answer and discussion would be education for all.

  • Errors with the Site from Adobe...

    First, I tried the Live Chat and I'm immediately started. I can't go on the chat to ask a question. As I click on the link: "for more information on the sites of migratiing that you previously created using the Business Catalyst extension, see the migration Business Catalyst to Dreamweaver CS6 sites.»  (http://www.adobe.com/go/learn_bc_import_en) and it goes to a 404 error Page.  The page that is link is: http://helpx.adobe.com/dreamweaver/using/dreamweaver-business-catalyst.html#main-pars_head er_2

    Edit: Live Chat started working.

    HI Lynda,

    Sorry, that was the staging URL. Use this one.

    http://helpx.Adobe.com/Dreamweaver/KB/migrate-business-catalyst-Dreamweaver.html

    Thank you

    Preran

  • Use of the site Web Adobe Stock additional terms?

    Hey there,

    I plan to use one or more images Adobe stock on a corporate Web site customers. I wonder about the following additional conditions:

    3.4 use of the Web site . Notwithstanding anything to the contrary herein conditions regarding using them and showing work on Web sites, you must take all reasonable steps to prevent the download Web site visitors or to reuse the work.

    What is considered "all reasonable steps"? Is that enough for only being implemented as a background via css images and avoid using the < img > - tag?

    Greetings

    Really what it means, it is not to use the full-res image or give it for download. There is no way that you can actually stop anyone from taking the image. So as long as you use the image for a specific purpose, you are usually very well.

  • Can't see Typekit fonts on the site of Adobe

    Hi, when I press 'Add TypeKit fonts' need on the Adobe site. Unfortunately, I don't see any fonts. My colleagues on other computers do not have the same problem, so I got a computer brand new this morning. However, I still have the same problem, even with the new computer.

    Any ideas guys?  Thank you.

    Hi Steve, it is fixed! Just now! It was a problem of proxy server.

  • I can't download a PDF on the site of Adobe Creative Cloud

    PDF files have been downloaded by a colleague. I can see that the PDF files are there (#1 in the picture), but when I go to the download page (image 2) and click the link for download (pdf, option), I get the following (n ° 3 in picture):

    Firefox - white screen;

    Chrome - white screen;

    THAT IS TO SAY - HTTP 500.

    I also tried on several different computers and operating systems. I have no problem download PDFs from other sites.

    (below with Firefox)

    scrsht.png

    Any help with this would be greatly appreciated. Thanks in advance.

    Hi Donald,.

    You can try to download the files from the link below:

    Assets.Adobe.com

    You will be prompted to sign in to your Adobe account if not signed in.

    Kind regards

    Sheena

  • Where on the site can Adobe you buy Professional DPS?

    This link shows that professional Adobe, DPS you can buy http://www.Adobe.com/UK/products/Digital-Publishing-Suite-Enterprise/FAQ.edu.html#

    -See the link there to the different options available with DPS purchase?

    However, when I call the number, the Member of the staff said it is enterprise only and there is no professional team and try sales.

    I try sales and they say that he is not for sale by adobe only a retailer - despite what it says on the link to the Adobe Web site listed.

    Resellers are supported almost doubling the price shown on the link and the prices vary a lot and only significantly more than Adobe pricing quoted on the link.

    Before I go ahead and buy from a reseller, can anyone confirm that you definitely can not buy Adobe. The link says you can, but everyone that I was responsible for sales, business and Customer Services, say no.

    is it true that the Member of the staff of the company advised that resellers are not supposed to sell at a different price to adobe?

    Why the web link dial you a number and fill out a form, but then sends you to business who say that they know nothing about professional dps direct. Very frustrating! Where is the team of professionals of dps and why everyone tell me that they do not exist!?

    Help!

    Hi sparkybot,

    Yes, it is not easy to find the appropriate links. I noticed that you use the UK site, so here is the link to the UK shop:

    http://www.Adobe.com/UK/products/catalog/software._sl_id-contentfilter_sl_catalog_sl_softw are_sl_allsoftware_uk.html? start = 30

    Click on the button buy to add to your shopping cart.

    Resellers should not ask for more money for the Pro edition, I think. I work for a dealer and that has never happened before, it is perhaps different in the United Kingdom? ...

    Good luck

  • Lack .exe file first 10 items on the site of Adobe

    I am reinstalling first 10 items on a new PC and the .exe file not seem to appear on the Adobe download page.

    Any ideas on how to install would be great!

    Kind regards

    Chris

    You can download the demo version of the software through the page linked below and then use your current serial number to activate it.

    Don't forget to follow the steps described in the Note: very important Instructions in the section on the pages of this site download and have cookies turned on in your browser, otherwise the download will not work correctly.

    Photoshop/Premiere Elements 10:

    l http://prodesigntools.com/Photoshop-Elements-10-Direct-Download-Links-PSE-Premiere-pre.htm

Maybe you are looking for