AppDetectivePRO and DbProtect Knowledgebase Update 4.55

This month's update for our AppDetectivePRO and DbProtect Knowledgebase is now available.

Knowledgebase version 4.55 includes new checks for Oracle, MySQL and MS SQL, updated checks for IBM DB2 for Linux, UNIX and Windows, MySQL and SAP (Sybase) Adaptive Server Enterprise (ASE) version 16.0.

New Vulnerability and Configuration Check Highlights

Oracle Database

  • Critical patch update
    • Determines if the database contains vulnerabilities described by Critical Patch Update/Patch Set Update – October 2015.
    • Risk: High
    • Relevant CVEs: CVE-2015-4794, CVE-2015-4796, CVE-2015-4857, CVE-2015-4863, CVE-2015-4873, CVE-2015-4888, CVE-2015-4900

MySQL

  • Critical patch update
    • Determines if the database contains vulnerabilities described if the database contains vulnerabilities described by Critical Patch Update – October 2015
    • Risk: High
    • Relevant CVEs: CVE-2015-1793, CVE-2015-4730, CVE-2015-4766, CVE-2015-4791, CVE-2015-4792, CVE-2015-4800, CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864, CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890, CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910, CVE-2015-4913

MS SQL Server

  • Non-DBA accounts with DDL privileges
    • Ensure that non-DBA accounts do not have DDL privileges
    • Risk: Medium
    • Relevant CVEs: N/A

Updated Checks

IBM DB2 LUW

  • Fix Pack not installed on time
    • Updated to support for 9.7 Fix Pack 11
    • Risk: High
    • Relevant CVEs: N/A
  • Latest patch not applied on time
    • Updated to support for 9.7 Fix Pack 11
    • Risk: High
    • Relevant CVEs: N/A

MySQL

  • Latest release not installed
    • Updated to support for 5.5.46 and 5.6.27
    • Risk: High
    • Relevant CVEs: N/A
  • Release update not installed on time
    • Updated to support for 5.5.46 and 5.6.27
    • Risk: High
    • Relevant CVEs: N/A

SAP (Sybase) ASE

  • Latest patch not applied
    • Updated to support for ASE 16.0 SP02 PL01
    • Risk: High
    • Relevant CVEs: N/A
  • Patch not applied on time
    • Updated to support for ASE 16.0 SP02 PL01
    • Risk: High
    • Relevant CVEs N/A

How to Update?

All AppDetectivePRO and DbProtect customers with maintenance (subscription or perpetual) in good standing can download the latest Knowledgebase Update 4.55 by visiting the Trustwave support portal at https://trustwave.com/Company/Support and selecting either the AppDetectivePRO or DbProtect product.

AppDetectivePRO customers can also update their deployment by launching the "Updater" within the product.

Trustwave reserves the right to review all comments in the discussion below. Please note that for security and other reasons, we may not approve comments containing links.