AppDetectivePRO and DbProtect Knowledgebase Update 4.55

This month's update for our AppDetectivePRO and DbProtect Knowledgebase is now available.

Knowledgebase version 4.55 includes new checks for Oracle, MySQL and MS SQL, updated checks for IBM DB2 for Linux, UNIX and Windows, MySQL and SAP (Sybase) Adaptive Server Enterprise (ASE) version 16.0.

New Vulnerability and Configuration Check Highlights

Oracle Database

• Critical patch update
  • Determines if the database contains vulnerabilities described by Critical Patch Update/Patch Set Update – October 2015.
  • Risk: High
  • Relevant CVEs: CVE-2015-4794, CVE-2015-4796, CVE-2015-4857, CVE-2015-4863, CVE-2015-4873, CVE-2015-4888, CVE-2015-4900

MySQL

• Critical patch update
  • Determines if the database contains vulnerabilities described if the database contains vulnerabilities described by Critical Patch Update – October 2015
  • Risk: High
  • Relevant CVEs: CVE-2015-1793, CVE-2015-4730, CVE-2015-4766, CVE-2015-4791, CVE-2015-4792, CVE-2015-4800, CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864, CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890, CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910, CVE-2015-4913

MS SQL Server

• Non-DBA accounts with DDL privileges
  • Ensure that non-DBA accounts do not have DDL privileges
  • Risk: Medium
  • Relevant CVEs: N/A

Updated Checks

IBM DB2 LUW

• Fix Pack not installed on time
  • Updated to support for 9.7 Fix Pack 11
  • Risk: High
  • Relevant CVEs: N/A

• Latest patch not applied on time
  • Updated to support for 9.7 Fix Pack 11
  • Risk: High
  • Relevant CVEs: N/A

MySQL

• Latest release not installed
  • Updated to support for 5.5.46 and 5.6.27
  • Risk: High
  • Relevant CVEs: N/A

• Release update not installed on time
  • Updated to support for 5.5.46 and 5.6.27
  • Risk: High
  • Relevant CVEs: N/A

SAP (Sybase) ASE

• Latest patch not applied
  • Updated to support for ASE 16.0 SP02 PL01
  • Risk: High
  • Relevant CVEs: N/A

• Patch not applied on time
  • Updated to support for ASE 16.0 SP02 PL01
  • Risk: High
  • Relevant CVEs N/A

How to Update?

AppDetectivePRO customers can also update their deployment by launching the "Updater" within the product.